users_config
users_config selects the XML file containing configured users. It defaults to users.xml. A relative path starts at the server configuration directory.
<users_config>users.xml</users_config>The file must exist. The server does not create an implicit user or infer credentials from a missing file.
User declaration
A users file can declare a password for a named user:
<coordinator>
<users>
<analyst>
<password>example-password</password>
</analyst>
</users>
</coordinator>A user has exactly one password form: plaintext password or a 64-character password_sha256_hex digest. An optional api_key_sha256_hex associates an HTTP Bearer key with that user. Usernames are case-sensitive; duplicate users and shared API-key digests are rejected.
Applying changes
Edit the existing server XML and restart. XML values are validated even when a command-line argument overrides them. Unknown or duplicate elements are configuration errors.
See configuration files for the complete document and path rules.