Disable OIDC claim

From the authentik docs:

In authentik releases prior to 2025.10, the email scope always set the email_verified claim to True. Since authentik does not have a single authoritative source to determine whether a user's email is actually verified, asserting this claim could have security implications. As of 2025.10, email_verified now defaults to False.
This commit is contained in:
2026-07-31 09:23:07 +00:00
parent 5b2f4eb951
commit b6a64e8981
+1
View File
@@ -33,6 +33,7 @@ services:
SMTP_FROM_NAME: Mealie SMTP_FROM_NAME: Mealie
SMTP_AUTH_STRATEGY: TLS SMTP_AUTH_STRATEGY: TLS
OIDC_AUTH_ENABLED: True OIDC_AUTH_ENABLED: True
OIDC_REQUIRES_EMAIL_VERIFICATION: False
OIDC_SIGNUP_ENABLED: True OIDC_SIGNUP_ENABLED: True
OIDC_AUTO_REDIRECT: True OIDC_AUTO_REDIRECT: True
OIDC_REMEMBER_ME: True OIDC_REMEMBER_ME: True