[Galene] wildcard users

[Dirk-Willem van Gulik <dirkx@webweaving.org>]

I am currently allowing people to enter an arbitrary name (and no password) on certain calls with a definition such as:

	// Generated 2026-11-02 11:09:23 UTC, project bar-test, DB: 9656dfdac01ba854402ca635e
	{
	  "public": false,
	  "op": [
		    {
		      "username": "xxxchairpersonxxx",
		      "password":  {"type":"bcrypt","key":"XXX"}
		    }
 	 ],
	  "users": {
		"XXXXmoderator1XXX":{"permissions": "present",....},
  		"XXXXmoderator2XXX":{"permissions": "present",....}
	  },
	  "wildcard-user": {
		"password": "",  "permissions": "present"
	  },
	  "presenter": [
	    {}
	  ]
	}

And am now seeing 

	Nov  2 03:56:52 jailed-galene daemon[19372]: 
		2026/11/02 03:56:52 /var/db/galene/groups/XXXXXXXX.json: duplicate wildcard user 
			2026/11/02 03:56:52 /var/db/galene/groups/XXXXXXXXX.json: duplicate wildcard user

in my log. Why is this ? And what is the right way to allow arbitrary names (and an empty or fixed, simple PIN style, password for ad-hoc cases where sending an invite or similar hurdle/extra step is non ideal) ?

With kind regards,

Dw