Profile: only edit fields Dex reads back
The Dex LDAP connector publishes uid, cn and mail as claims, so the profile page now offers just Name (cn), the verified email change and the password. The photo endpoint, SSH keys, addresses, phones and other extended attributes are no longer read or written; existing LDAP values are left untouched. Apache's profile upload limit drops back to the 256 KiB used by other member routes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
@@ -251,10 +251,6 @@ ProxyPassReverse "/members/" "http://membership:8000/members/"
|
||||
RequestHeader set X-Membership-Client-IP "expr=%{REMOTE_ADDR}"
|
||||
LimitRequestBody 262144
|
||||
</Location>
|
||||
<Location "/members/profile/">
|
||||
# 1 MiB JPEG plus form/multipart overhead; other member routes stay smaller.
|
||||
LimitRequestBody 2097152
|
||||
</Location>
|
||||
|
||||
#
|
||||
# Deny access to the entirety of your server's filesystem. You must
|
||||
|
||||
Reference in New Issue
Block a user