ADMIT — who the web interface lets in

Raised while setting the password lemonfiber ui asks for before it will answer anything but this machine, and by the web API it serves when it turns away who is asking, or where from. ADMIT-4 to ADMIT-7, ADMIT-11 and ADMIT-12 answer 403, a wrong password 401, too many of them 429, and a body that is not a password 400. See the web API.

Code	Severity	Exit	What it means	What to do
ADMIT-1	error	1	That password is too short to be the one. It is the only thing standing in front of a surface that can start, stop and reconfigure everything, and what is on the other side of it is a program that guesses without getting bored.	Use at least twelve characters. Several unrelated words are easier to keep and harder to guess than one word with substitutions in it.
ADMIT-2	error	1	The password could not be recorded. Every stored password is mixed with unpredictable bytes so that two of them are never written down the same way, and this machine would not supply any.	Try again. If it happens twice, the operating system's own random source is at fault.
ADMIT-3	error	1	The two passwords typed were not the same, and nothing was changed. It is asked for twice because nothing here can read one back afterwards, so the second answer is the only check there is that the first was typed the way it was meant.	Set it again, typing the same password both times.
ADMIT-4	error	1	The request carried no token or session this run admits, and nothing was answered. The sentence does not say which it was: it answers somebody who has proved nothing, and naming what was wrong would tell them what to keep guessing at.	Sign in again, or open lemonfiber from the address it printed when it started.
ADMIT-5	error	1	The request said it came from somewhere this server is not. The address it named, or the page it came from, is not the one this server is listening on, and nothing was answered.	Reach lemonfiber at the address it is listening on.
ADMIT-6	warning	1	This is not something this account may ask for. Nothing is wrong with the account: what was asked for belongs to somebody else, or to whoever looks after this machine.	Ask whoever looks after this machine, if you need it.
ADMIT-7	warning	1	The account could not be checked with the media server, so nobody was identified and nothing was answered. The account has not been removed, the session has not ended, and nothing about the account changed.	Try again once the media server is running.
ADMIT-8	error	1	That is not the password for this machine. Nothing was opened, and no session was begun. The same is said where no password is set, so whoever is knocking cannot tell whether there is anything here to guess at.	Check the password and try again.
ADMIT-9	warning	1	Too many wrong passwords. The door has stopped looking at passwords for a while, and another attempt now makes the wait longer. The message says how long, and so does the answer's Retry-After header.	Wait as long as it says, then try once more.
ADMIT-10	error	1	What was offered at the door is not a password. The door reads a password, and a household member's name beside it, and the body carried neither in a form it can read.	Send the password as the body's password.
ADMIT-11	error	1	A key, or a request to mint one, arrived from another machine over a connection its pin does not verify, and nothing was answered or minted. A key or a secret crosses a network only over the encrypted connection whose certificate the key was minted with, because one sent any other way may have been read on the way.	Connect over https, pinning the certificate the key was minted with, and revoke the key with lemonfiber key revoke if it may have been read.
ADMIT-12	warning	1	The key asked for something its scope does not reach, and nothing was done. A key has one scope — read, act or one member's own — and admits that and nothing more.	Call only what the contract lists as callable by a key, or ask whoever looks after this machine.
ADMIT-13	error	1	This invitation can no longer be claimed, and nothing was set. The same is said whether it was claimed already, ran out, was declined or was never one, so a guess learns nothing about which.	Ask whoever invited you for a new invitation.
ADMIT-14	error	1	The password chosen is too short, and nothing was set. The invitation still stands and can be claimed with a longer one.	Choose a password of at least twelve characters.

What each severity and each exit means is on every error by code, beside every other family.