Cornelius Kölbel

@mskalski is right. It is not yet merged. However, the patch works for me on Ubuntu 20.04 and the Yubikey 5 with ``libykcs11.so``.

A possible way to enforce the communication between the person who sits in front of the login dialog and the holder of the smartphone app would be as follows: The...

This would be related to #3632 or even would make it obsolete. We could even, if the number is answered wrong, start to delete the challenge or block the token.

@gerdesj How does your policy look like in detail? Note, that the login text can not e.g. handle realms, users and resolvers for reasons.

The problem may also dependent on the number of CPUs.

@nilsbehlen I assume it is currently not perfect, since modules are loaded on each request for the `get_...` function. I should probably write it to the cache.

@nilsbehlen ok, that was easy. Done in 6071a0d18

We could do a more generic email setting. Maybe we only want to allow emails from a certain domain. Or we do want to restrict emails from a certain domain....

Steps to reproduce: Have a system on the previous version: ./pi-manage db stamp 5cb310101a1f Remove nodename table from DB. Now add the nodename table: ./pi-manage db upgrade e3a64b4ca634 Works. Now...

Interesting. When I read the documentation my understanding is that Authelia does not act as a relying party but as a provider. https://www.authelia.com/integration/openid-connect/introduction/ If Authelia was able to act as...