kevinveenbirkenbachandClaude Opus 5.5 3d1480b3f7 fix(web-app-stalwart): resolve account ids when SSO owns the directory ...

With the Keycloak OIDC directory active, Stalwart refuses every account create with 'forbidden: Cannot set credentials for accounts in an external directory', and full-4 failed the new batch assert on all accounts. The create request now lists the accounts in the same call and takes each id from the listing of the provisioned domain. Under SSO a forbidden create is tolerated for people, who may not exist before their first login; every bot still needs an id because its app password is addressed by account.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-24 12:04:29 +02:00

..

cli

feat(inventory): reject unread keys and a missing Cloudflare token before the deploy

2026-10-23 16:18:12 +02:00

group_vars

test(wireguard): the layer follows group membership

2026-10-16 21:26:17 +02:00

library

test(library): keep the project-walk marker on the rglob line

2026-10-24 11:06:38 +02:00

plugins

fix(tls): serve every vhost the certificate of its own domain

2026-10-23 23:41:33 +02:00

roles

fix(web-app-stalwart): resolve account ids when SSO owns the directory

2026-10-24 12:04:29 +02:00

scripts

fix(apparmor): keep docker-default loaded when tearing AppArmor down

2026-10-20 12:11:14 +02:00

utils

fix(cache): render a templated DOMAIN_PRIMARY against the play variables

2026-10-24 00:40:32 +02:00

__init__.py

…