Tim Möhlmann

I've been using lexicon as part of the https://github.com/adferrand/letsencrypt-dns Docker image and it works stable. The main problem we'll be facing is the provider specific API variables. They are not...

OS release info: ``` NAME="openSUSE Tumbleweed" # VERSION="20240302" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20240302" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" # CPE 2.3 format, boo#1217921 CPE_NAME="cpe:2.3:o:opensuse:tumbleweed:20240302:*:*:*:*:*:*:*" #CPE 2.2 format #CPE_NAME="cpe:/o:opensuse:tumbleweed:20240302" BUG_REPORT_URL="https://bugzilla.opensuse.org" SUPPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo-Tumbleweed"...

Path is non-standard because I need the go paths in there: ``` /home/tim/go/bin:/home/tim/Repositories/goroot/bin:/home/tim/.local/bin:/home/tim/bin:/usr/local/bin:/usr/bin:/bin ```

> Re: SIGWINCH, the only case I'm aware of using SIGWINCH are window managers when a window changes size. But do these systems even have a window manager? That might...

> Yeah, that's pretty weird. Maybe something in the builder changed and it now thinks it has a window manager?... Do the builders use some kind of terminal-to-web emulator that...

Pinging @kaiyou as apparently this was discussed on Matrix. Background: SRS was added recently on master: Mailu/Mailu#1349

@akaegi we did discuss this. But as the JWT profile grant already works without user interaction, there is no real `offline_access`. The app might as well just send a freshly...

I also understand your reasoning. However, we enforce the grant type on the token endpoint by OIDC client config. For `refresh_token` the OIDC config must contain that grant. In our...

It would fix it only for zitadel through the custom implementation of the `ClientCredentials` server method. Is that sufficient for the requested usecase?

@akaegi with the `urn:zitadel:iam:org:project:id:{projectid}:aud` scope you can add the entire project of the client into the audience, making it valid for that app. Would that solve your issue?