7e7e41cbef
All checks were successful
ci/woodpecker/push/default Pipeline was successful
The passwordless enrollment prompt collects only email+name, so user_write aborted with 'Aborting write to empty username' (ak-stage-access-denied). Add an expression policy on the user_write binding (evaluate_on_plan=false + re_evaluate_policies=true, like guest.tf) that sets prompt_data['username'] = the entered email before the write. Verified the failure live via the flow executor API. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| modules/authentik | ||
| admin-services-restriction.tf | ||
| authentik_provider.tf | ||
| email-secret.tf | ||
| guest.tf | ||
| main.tf | ||
| secrets | ||
| t3-users.tf | ||
| terragrunt.hcl | ||
| tripit-email-blueprint.tf | ||
| tripit-email-stages.yaml | ||
| tripit-external.tf | ||
| tripit-flows.tf | ||
| vault-authz-binding.tf | ||