Disable OIDC claim
From the authentik docs: In authentik releases prior to 2025.10, the email scope always set the email_verified claim to True. Since authentik does not have a single authoritative source to determine whether a user's email is actually verified, asserting this claim could have security implications. As of 2025.10, email_verified now defaults to False.
This commit is contained in:
@@ -33,6 +33,7 @@ services:
|
|||||||
SMTP_FROM_NAME: Mealie
|
SMTP_FROM_NAME: Mealie
|
||||||
SMTP_AUTH_STRATEGY: TLS
|
SMTP_AUTH_STRATEGY: TLS
|
||||||
OIDC_AUTH_ENABLED: True
|
OIDC_AUTH_ENABLED: True
|
||||||
|
OIDC_REQUIRES_EMAIL_VERIFICATION: False
|
||||||
OIDC_SIGNUP_ENABLED: True
|
OIDC_SIGNUP_ENABLED: True
|
||||||
OIDC_AUTO_REDIRECT: True
|
OIDC_AUTO_REDIRECT: True
|
||||||
OIDC_REMEMBER_ME: True
|
OIDC_REMEMBER_ME: True
|
||||||
|
|||||||
Reference in New Issue
Block a user