GitHub Social Login + Auth flow fixes. Password reset, email verification, etc.

.env.example

@@ -4,6 +4,7 @@ KEYWARDEN_DEBUG=True
 KEYWARDEN_ALLOWED_HOSTS=*
 KEYWARDEN_TRUSTED_ORIGINS=https://reverse.proxy.domain.xyz,https://127.0.0.1
 KEYWARDEN_DOMAIN=https://example.domain.xyz
+KEYWARDEN_IDP_ACCOUNT_PORTAL_URL=
 KEYWARDEN_SHELL_REMOTE_COMMAND=/bin/bash
 # Set to 1 to include SSH probe/certificate diagnostics in shell failures.
 KEYWARDEN_SHELL_DEBUG=0
@@ -33,6 +34,22 @@ KEYWARDEN_ADMIN_PASSWORD=password
 
 KEYWARDEN_AUTH_MODE=native
 
+# Email delivery (required for password reset + native email verification)
+# KEYWARDEN_EMAIL_BACKEND=django.core.mail.backends.smtp.EmailBackend
+# KEYWARDEN_EMAIL_HOST=smtp.example.com
+# KEYWARDEN_EMAIL_PORT=587
+# KEYWARDEN_EMAIL_HOST_USER=
+# KEYWARDEN_EMAIL_HOST_PASSWORD=
+# KEYWARDEN_EMAIL_USE_TLS=true
+# KEYWARDEN_EMAIL_USE_SSL=false
+# KEYWARDEN_DEFAULT_FROM_EMAIL=keywarden@example.com
+# KEYWARDEN_SERVER_EMAIL=keywarden@example.com
+
+# Native email verification
+# KEYWARDEN_EMAIL_VERIFICATION_ENABLED=true
+# KEYWARDEN_EMAIL_VERIFICATION_TOKEN_MAX_AGE_SECONDS=86400
+# KEYWARDEN_EMAIL_VERIFICATION_RESEND_COOLDOWN_SECONDS=300
+
 
 # OIDC (optional) Currently supports Authentik officially and tested. Other solutions such as Keycloak may work.
 # KEYWARDEN_OIDC_CLIENT_ID=
@@ -58,16 +75,9 @@ KEYWARDEN_AUTH_MODE=native
 # Social login (optional)
 # KEYWARDEN_SITE_ID=1
 # KEYWARDEN_SOCIAL_REQUIRE_VERIFIED_EMAIL=true
-# KEYWARDEN_SOCIAL_ALLOW_AUTO_ONBOARDING=false
-# KEYWARDEN_SOCIAL_GOOGLE_ENABLED=false
-# KEYWARDEN_SOCIAL_GOOGLE_CLIENT_ID=
-# KEYWARDEN_SOCIAL_GOOGLE_CLIENT_SECRET=
 # KEYWARDEN_SOCIAL_GITHUB_ENABLED=false
 # KEYWARDEN_SOCIAL_GITHUB_CLIENT_ID=
 # KEYWARDEN_SOCIAL_GITHUB_CLIENT_SECRET=
-# KEYWARDEN_SOCIAL_APPLE_ENABLED=false
-# KEYWARDEN_SOCIAL_APPLE_CLIENT_ID=
-# KEYWARDEN_SOCIAL_APPLE_CLIENT_SECRET=
 
 # Authentik Secrets
 AUTHENTIK_PG_PASS=