Post-X-Society/Post-Tyranny-Tech-Infrastructure
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: Enable automated password recovery flow configuration

Browse source 
Add recovery.yml task include to main.yml to enable automated
password recovery flow setup. This calls the recovery.yml tasks
which use create_recovery_flow.py to configure:

- Password complexity policy (12+ chars, mixed case, digit, symbol)
- Recovery identification stage (username/email)
- Recovery email stage (30-minute token expiry)
- Integration with default authentication flow
- "Forgot password?" link on login page

This restores automated recovery flow setup that was previously
removed when the blueprint-based approach was abandoned. The new
approach uses direct API calls via Python script which is more
reliable than blueprints.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
This commit is contained in:
Pieter 2026-01-20 18:22:02 +01:00
parent 2a107cbf14
commit ecc09127ef
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
ansible/roles/authentik/tasks/main.yml
View file

@ -31,3 +31,8 @@
include_tasks: invitation.yml include_tasks: invitation.yml
when: authentik_bootstrap | default(true) when: authentik_bootstrap | default(true)
tags: ['authentik', 'invitation'] tags: ['authentik', 'invitation']
- name: Include password recovery flow configuration
include_tasks: recovery.yml
when: authentik_bootstrap | default(true)
tags: ['authentik', 'recovery']