computer-playbook/roles/web-app-xwiki/tasks/03_administrator.yml

---
# Wait until REST endpoint is available (01_core usually ensures this, but add safety)
- name: "XWIKI | Wait until REST answers"
  uri:
    url: "{{ XWIKI_REST_BASE }}"
    status_code: [200, 401]
  register: _rest_ping
  retries: 60
  delay: 5
  until: _rest_ping is succeeded

# Check if the target admin already exists
# 404 => missing, 302 => DW redirect (treat as missing for bootstrap)
- name: "XWIKI | Check if target admin user exists"
  uri:
    url: "{{ XWIKI_REST_XWIKI }}/users/{{ XWIKI_ADMIN_USER | urlencode }}"
    method: GET
    user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
    password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
    force_basic_auth: true
    status_code: [200, 404, 302]
  register: _admin_exists

# Create admin user if not existing (or DW still redirecting)
- name: "XWIKI | Create admin user via REST"
  uri:
    url: "{{ XWIKI_REST_XWIKI }}/users"
    method: POST
    user: "{{ XWIKI_SUPERADMIN_USERNAME }}"
    password: "{{ XWIKI_SUPERADMIN_PASSWORD }}"
    force_basic_auth: true
    status_code: 201
    headers:
      Content-Type: "application/xml"
    body: |
      <user>
        <firstName>{{ users.administrator.firstname | default('Admin') }}</firstName>
        <lastName>{{ users.administrator.lastname  | default('User') }}</lastName>
        <email>{{ users.administrator.email }}</email>
        <username>{{ XWIKI_ADMIN_USER }}</username>
        <password>{{ XWIKI_ADMIN_PASS }}</password>
      </user>
  when: _admin_exists.status in [404, 302]