Method SetBypassSetupToken

internal/server/bootstrap.go:191–193

SetBypassSetupToken wires the operator's PAD_BYPASS_SETUP_TOKEN choice into the Server. When true, handleBootstrap accepts a self-host first-admin POST from any IP without an X-Bootstrap-Token header. Cloud mode never honors this flag (see Server.bypassSetupToken doc). Called once at startup from c

(bypass bool)

// half-set value; the field reads in handleBootstrap and
// handleSessionCheck are therefore unguarded.
func (s *Server) SetBypassSetupToken(bypass bool) {
	s.bypassSetupToken = bypass
}

// openBootstrapEnabled reports whether open-bootstrap is active for this
// server: bypass flag is set AND we're not in cloud mode. Cloud mode