Review of tripit slice #50 caught that the provider's default sub_mode (hashed_user_id) would make Shell JWTs carry a sub that never matches the email-keyed prod user rows - first app login would either 500 in placeholder reconciliation or split the user's identity. sub_mode = user_email makes bearer and forward-auth resolve the same row. Part of the Android APK work (tripit #50). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| authentik.tf | ||
| main.tf | ||
| terragrunt.hcl | ||