This will make the app act such that the user authentified is the one that corresponds to the jwt payload. Windmill uses just-in-time provisioning by default and the user doesn't need to have been pre-provisioned for it to works.
We're live here https://discord.com/channels/930051556043276338/1278977038430240813
henri-c · 6d ago
Infrastructure as code
rubenf · 4w ago
As we're preparing for a new Windmill sandbox SDK, we took the opportunity **to open-source NSJAIL sandboxing** and make it available in CE and easier to set. In 1.634.0, just set nsjail to benefit from the tightest security and isolation per job. It's constraining so no need to use it unless you need but now you won't be restricted in security for CE if you need to.
rubenf · 4w ago