You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Add a Flag to Disable User Registration in PasswordUI and PasswordProvider #199
It would be helpful to introduce a configuration flag that allows disabling user registration in both the PasswordUI and PasswordProvider.
Use Case
In corporate environments or intranet applications, user registration is often restricted to pre-approved or manually created accounts. Allowing open registration can be a security risk and is generally not desired in such setups.
Proposed Solution
Add a configuration option (e.g., allowUserRegistration: boolean) that, when set to false, disables:
The "Sign Up" option in PasswordUI.
The ability to register new users via PasswordProvider.
Expected Behavior
If the flag is set to false, only pre-existing users should be able to log in.
Any attempt to register a new user should be blocked both in the UI and programmatically.
Would this feature be aligned with the project's vision? I’d be happy to discuss implementation details or contribute a PR.
Activity
cmnstmntmn commentedon Feb 13, 2025
@daniel7byte there's also
allow_signupflag that can be sent as a query you should be aware of.. at least for GitHub provider https://docs.github.com/en/apps/oauth-apps/building-oauth-apps/authorizing-oauth-appsthdxr commentedon Mar 21, 2025
will take a PR for this
TheOrdinaryWow commentedon Apr 9, 2025
upvote for this feature
straygar commentedon Apr 18, 2025
Instead of a flag, is it possible to somehow make this conditional? E.g. to lock down account registration to specific domains.
Fix anomalyco#199. Provides a way to disable and/or control user regi…
Fix anomalyco#199. Provides a way to disable and/or control user regi…