infra/stacks/tripit
Viktor Barzin 765cfe803f tripit: tripit-app provider issues sub = user email (hybrid-auth identity fix)
Review of tripit slice #50 caught that the provider's default
sub_mode (hashed_user_id) would make Shell JWTs carry a sub that
never matches the email-keyed prod user rows - first app login
would either 500 in placeholder reconciliation or split the user's
identity. sub_mode = user_email makes bearer and forward-auth
resolve the same row. Part of the Android APK work (tripit #50).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-12 21:00:33 +00:00
..
authentik.tf tripit: tripit-app provider issues sub = user email (hybrid-auth identity fix) 2026-06-12 21:00:33 +00:00
main.tf kyverno: sync-ghcr-credentials to private-ghcr namespaces; tripit consumes the clone 2026-06-12 20:28:11 +00:00
terragrunt.hcl fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip] 2026-06-09 08:45:33 +00:00