From 798be582713dc71c13ca0c1677df5286639d5995 Mon Sep 17 00:00:00 2001
From: Nikola Novoselec <nikolanovoselec@users.noreply.github.com>
Date: Tue, 21 Oct 2025 17:39:41 +0200
Subject: [PATCH] docs: explain admin import password logic

---
 src/ui/Desktop/Admin/AdminSettings.tsx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/ui/Desktop/Admin/AdminSettings.tsx b/src/ui/Desktop/Admin/AdminSettings.tsx
index c1e4b0ad..b04a0c20 100644
--- a/src/ui/Desktop/Admin/AdminSettings.tsx
+++ b/src/ui/Desktop/Admin/AdminSettings.tsx
@@ -107,6 +107,7 @@ export function AdminSettings({
   const [showPasswordInput, setShowPasswordInput] = React.useState(false);
   const [importPassword, setImportPassword] = React.useState("");
 
+  // Only local accounts need to confirm their password before we post the import request.
   const requiresImportPassword = React.useMemo(
     () => !currentUser?.is_oidc,
     [currentUser?.is_oidc],
@@ -129,6 +130,7 @@ export function AdminSettings({
           toast.error(t("admin.failedToFetchOidcConfig"));
         }
       });
+    // Capture the current session so we know whether to ask for a password later.
     getUserInfo()
       .then((info) => {
         if (info) {
@@ -386,6 +388,7 @@ export function AdminSettings({
       const formData = new FormData();
       formData.append("file", importFile);
       if (requiresImportPassword) {
+        // Preserve the existing password flow for non-OIDC accounts.
         formData.append("password", importPassword);
       }
 
@@ -996,6 +999,7 @@ export function AdminSettings({
                           </span>
                         </Button>
                       </div>
+                      {/* Only render the password field when a local account is performing the import. */}
                       {importFile && requiresImportPassword && (
                         <div className="space-y-2">
                           <Label htmlFor="import-password">Password</Label>