Post-X-Society/Post-Tyranny-Tech-Infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: Change enrollment flow to invitation-only (not public)

Browse source 
- Set continue_flow_without_invitation: false
- Enrollment now requires a valid invitation token
- Users cannot self-register without an invitation
- Renamed metadata to reflect invitation-only nature

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Pieter 2026-01-15 11:27:43 +01:00
parent 508825ca5a
commit af2799170c
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
ansible/roles/authentik/files/enrollment-flow.yaml
View file

@ -1,8 +1,8 @@
version: 1 version: 1
metadata: metadata:
name: public-enrollment-flow name: invitation-enrollment-flow
labels: labels:
blueprints.goauthentik.io/description: "Public enrollment flow with invitation support" blueprints.goauthentik.io/description: "Invitation-only enrollment flow"
blueprints.goauthentik.io/instantiate: "true" blueprints.goauthentik.io/instantiate: "true"
entries: entries:
@ -20,7 +20,7 @@ entries:
# 2. CREATE INVITATION STAGE # 2. CREATE INVITATION STAGE
- attrs: - attrs:
continue_flow_without_invitation: true continue_flow_without_invitation: false
identifiers: identifiers:
name: default-enrollment-invitation name: default-enrollment-invitation
id: invitation-stage id: invitation-stage