sorb/axion1337.chat-gitops
1
0
Fork 0
Code Issues Pull Requests Packages Projects 1 Releases 24 Wiki Activity

fix: Clear erroneous validation_policies on matrix-invitation-prompt

Browse Source 
The prompt stage had 16 unrelated system policies bound (OOBE, user
settings, recovery, etc.), likely from a "select all" slip while
configuring it manually. They crash when evaluated in an anonymous
enrollment context (AnonymousUser has no group_attributes, etc.),
surfacing as opaque errors after form submit. Cleared live and via
the blueprint so re-application doesn't reintroduce them.
This commit is contained in:
Thore Cimbal
2026-07-27 12:00:00 +00:00
parent 80714fe901
commit d2bcd90291
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/authentik/authentik-blueprints.yaml
+12
View File
@@ -23,6 +23,18 @@ data:
title: matrix-invitation title: matrix-invitation
designation: enrollment designation: enrollment
# The prompt stage had accumulated 16 unrelated system validation_policies
# (e.g. default-user-settings-authorization, default-oobe-password-usable)
# from manual UI setup, likely a "select all" slip in the policy picker.
# These crash on an anonymous enrollment context ('AnonymousUser' object
# has no attribute 'group_attributes', etc). A prompt stage needs none here.
- model: authentik_stages_prompt.promptstage
state: present
identifiers:
name: matrix-invitation-prompt
attrs:
validation_policies: []
# Correct stage chain, mirroring the working matrix-enrollment flow: # Correct stage chain, mirroring the working matrix-enrollment flow:
# Invite -> Prompt (username/email/password) -> Write -> Password -> Login # Invite -> Prompt (username/email/password) -> Write -> Password -> Login
# Root cause of the original bug: only Invite+Prompt were bound, both at # Root cause of the original bug: only Invite+Prompt were bound, both at