mirror of
https://github.com/sol1/rustguac.git
synced 2026-10-25 21:19:45 +00:00
Dave Kempe
f3081d4c88
Since 1.12.0 a login whose email the provider marks unverified is refused. authentik's default email scope mapping sends email_verified: False for every user, so every authentik login has been refused since then, and there was no way round it in rustguac. The authentik setup guide gets a step for an email mapping that sends true, with the caveat that users must not be able to change their own email. For providers that can't be changed, [oidc] allow_unverified_email = true lets these logins through, with a warning at startup. The refusal's log line now says what to change, and the login page asks the user to see an admin.
