Overview

Forum User Credential

JIT-provisioned mapping between a Keycloak user (kc_sub = preferred_username claim) and their auto-created Lemmy account (F4.FORUM.02). Holds an AES-256-GCM encrypted internal Lemmy password — service-only, never exposed to end users, forum-connector is the sole consumer.