fix: Fix OsRng import and refactor Redis connection setup

- Fix password-hash version mismatch (0.6→0.5) causing OsRng to be
  gated behind missing getrandom feature; enable argon2 rand feature
- Extract get_redis_connection() helper to deduplicate Redis client
  setup across authentication, repo control, and tests
- Tighten username validation regex to require ≥2 chars and disallow
  leading/trailing dots or hyphens
- Handle malformed cookies without split_once gracefully (continue
  instead of panic)
- Fix typos: "rated commands" → "related commands" in CLI help text

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Signed-off-by: KunoiSayami <[email protected]>

1 files changed, 10 insertions, 1 deletions

diff --git a/src/datastructures.rs b/src/datastructures.rs
index 4ca1a00..82c0325 100644
--- a/src/datastructures.rs
+++ b/src/datastructures.rs
@@ -71,6 +71,13 @@ pub fn rand_str(len: usize) -> String {
     password
 }
 
+pub(crate) async fn get_redis_connection(
+    redis_url: &str,
+) -> Result<redis::aio::MultiplexedConnection> {
+    let client = redis::Client::open(redis_url)?;
+    Ok(client.get_multiplexed_async_connection().await?)
+}
+
 pub(crate) trait TestSuite {
     fn generate_test_config() -> Self;
 }
@@ -532,7 +539,9 @@ impl Cookie {
     pub fn load_from_request(cookies: &str) -> Result<Option<Self>> {
         let mut cookie_self = None;
         for cookie in cookies.split(';').map(|x| x.trim()) {
-            let (key, value) = cookie.split_once('=').unwrap();
+            let Some((key, value)) = cookie.split_once('=') else {
+                continue;
+            };
             if key.eq("cgit_auth") {
                 let value = base64::engine::general_purpose::STANDARD
                     .decode(value)