feat(admin/user): show users auth method + add cli to recover broken opaque login

src/interfaces/api/handlers/opaque_auth_handler.rs

@@ -105,9 +105,9 @@ use uuid::Uuid;
 
 use crate::application::dtos::user_dto::AuthResponseDto;
 use crate::common::di::AppState;
-use crate::interfaces::api::cookie_auth;
 use crate::infrastructure::services::opaque_login_exchange::{ExchangeId, OpaqueLoginExchange};
 use crate::infrastructure::services::opaque_service::{OpaqueService, OxiCloudSuite};
+use crate::interfaces::api::cookie_auth;
 use crate::interfaces::errors::AppError;
 use crate::interfaces::middleware::auth::CurrentUserId;
 

src/interfaces/middleware/user.rs

@@ -255,10 +255,7 @@ pub async fn require_internal_user_layer(
 /// on a rate-limited public path that doesn't carry a `CurrentUser` at
 /// middleware time; the gate never fires on it. If refresh ever moves
 /// under the gate, add `(&Method::POST, "/api/auth/refresh")` here.
-fn is_password_change_pending_allowlisted(
-    method: &axum::http::Method,
-    path: &str,
-) -> bool {
+fn is_password_change_pending_allowlisted(method: &axum::http::Method, path: &str) -> bool {
     use axum::http::Method;
     matches!(
         (method, path),