From df00ff0abfd78cfecc2114059733d30aa03071f5 Mon Sep 17 00:00:00 2001 From: Kevin Veen-Birkenbach Date: Fri, 30 Oct 2026 09:17:06 +0100 Subject: [PATCH] fix(web-app-matrix): turn off Element's forced verification in variant 1 4a56b4c19c set services.element.force_verification to false only for the SSO variants 0 and 2, on the reasoning that only the SSO specs log the same account in twice. The deploy's second pass logs the variant 1 administrator (ansible flavor, SSO off, password login) in again. PASS 1 bootstraps the account's cross-signing identity, so in PASS 2 Element stops on "Confirm your digital identity" ("Use another device" / "Can't confirm?" / "Remove this device", no skip), and the password-login spec times out at _shared.js:436 (fork run 40979252521, job 123823820263, Discourse#1 with web-app-matrix variant 1, all three retries). Variant 1 now sets force_verification to false like the other two. The services.yml default stays true, so production keeps forced verification. No variant exercises true end to end any more; the follow-up issue restores one. Co-Authored-By: Claude Opus 5.5 --- roles/web-app-matrix/meta/variants.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/roles/web-app-matrix/meta/variants.yml b/roles/web-app-matrix/meta/variants.yml index 537076f63d..a55875e719 100644 --- a/roles/web-app-matrix/meta/variants.yml +++ b/roles/web-app-matrix/meta/variants.yml @@ -50,6 +50,8 @@ container_backup: enabled: false shared: false # nocheck: variants-static-override backup shared stays literally true + element: + force_verification: false matrix: flavor: ansible coturn: