b6a64e8981120a799c90fcb22330ff1cced2be53
From the authentik docs: In authentik releases prior to 2025.10, the email scope always set the email_verified claim to True. Since authentik does not have a single authoritative source to determine whether a user's email is actually verified, asserting this claim could have security implications. As of 2025.10, email_verified now defaults to False.