From b6a64e8981120a799c90fcb22330ff1cced2be53 Mon Sep 17 00:00:00 2001
From: Akumatic <git@akumatic.eu>
Date: Fri, 31 Jul 2026 09:23:07 +0000
Subject: [PATCH] Disable OIDC claim

From the authentik docs:

In authentik releases prior to 2025.10, the email scope always set the email_verified claim to True. Since authentik does not have a single authoritative source to determine whether a user's email is actually verified, asserting this claim could have security implications. As of 2025.10, email_verified now defaults to False.
---
 docker-compose.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docker-compose.yml b/docker-compose.yml
index 299ae15..82b64f7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -33,6 +33,7 @@ services:
       SMTP_FROM_NAME: Mealie
       SMTP_AUTH_STRATEGY: TLS
       OIDC_AUTH_ENABLED: True
+      OIDC_REQUIRES_EMAIL_VERIFICATION: False
       OIDC_SIGNUP_ENABLED: True
       OIDC_AUTO_REDIRECT: True
       OIDC_REMEMBER_ME: True