docs(authentik,openwebui): the roles claim mints the OpenWebUI role; jason joins the census #144

Merged

dank merged 2 commits from docs/authentik-jason-provision into main

2026-11-04 12:57:07 -08:00

Author	SHA1	Message	Date
Frank	25114ca622	Merge remote-tracking branch 'origin/main' into wt/20261104-104444	2026-11-04 12:42:19 -08:00
Frank	a07f492b89	docs(authentik,openwebui): the roles claim mints the OpenWebUI role Provisioned jason (pk 24, human-user template) and drove his first SSO login in a clean browser: the row appeared as role='user' with chat and wilwheaton TTS working, no manual step. The pending-then-flip law is therefore wrong for a claim-carrying account - ENABLE_OAUTH_ROLE_MANAGEMENT + the roles scope decide it, and 0.12.5 refuses a claim-less login with 403 instead of falling back to ui.default_user_role. Census gains jason.	2026-11-04 12:42:19 -08:00

Author

SHA1

Message

Date

Frank

25114ca622

Merge remote-tracking branch 'origin/main' into wt/20261104-104444

2026-11-04 12:42:19 -08:00

Frank

a07f492b89

docs(authentik,openwebui): the roles claim mints the OpenWebUI role

Provisioned jason (pk 24, human-user template) and drove his first SSO
login in a clean browser: the row appeared as role='user' with chat and
wilwheaton TTS working, no manual step. The pending-then-flip law is
therefore wrong for a claim-carrying account - ENABLE_OAUTH_ROLE_MANAGEMENT
+ the roles scope decide it, and 0.12.5 refuses a claim-less login with 403
instead of falling back to ui.default_user_role. Census gains jason.

2026-11-04 12:42:19 -08:00