Authentik injects the full email (e.g. vbarzin@gmail.com), but /etc/ttyd-user-map and dispatch.json key on the local part (vbarzin), so every real login hit 403 'no instance provisioned'. Strip @domain before lookup, matching the terminal stack's tmux-attach.sh. Verified: vbarzin@gmail.com / emil.barzin@gmail.com -> 302 (own instance); unmapped/no-header -> 403. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| go.mod | ||
| main.go | ||