kevinveenbirkenbachandClaude Opus 5.5 49aa920034 perf(web-app-keycloak): mark user emails verified in one REST call ...

The emailVerified update looped over every non-reserved user, uploaded a
shell script per user and ran kcadm with a JVM login each time, and it
always reported changed: 7 users took 23.8 s on echoserver.

email_verified.py uses the shared keycloak_admin client through
tasks/utils/rest_script.yml: it looks each user up by exact username,
skips users already verified, and writes emailVerified with a GET plus a
full-representation PUT, as kcadm update did. The task reports changed
only when a user was updated, and a failed lookup now fails the task
instead of being treated as a missing user. The old lookup piped
kcadm -q username=X into head -n1, which could have hit a longer username
sharing the prefix.

Evidence (local compose, slot 104): summary updated=0 unchanged=8
missing=0 failed=0 in 0.60 s, task ok, staging dir removed.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-24 19:39:53 +02:00

..

cli

feat(inventory): reject unread keys and a missing Cloudflare token before the deploy

2026-10-23 16:18:12 +02:00

group_vars

…

library

test(library): keep the project-walk marker on the rglob line

2026-10-24 11:06:38 +02:00

plugins

fix(tls): serve every vhost the certificate of its own domain

2026-10-23 23:41:33 +02:00

roles

perf(web-app-keycloak): mark user emails verified in one REST call

2026-10-24 19:39:53 +02:00

scripts

…

utils

Merge remote-tracking branch 'origin/main' into feature/updater-lockdown-probe

2026-10-24 15:09:52 +02:00

__init__.py

…