New user does not respect account settings

Created on 14 May 2024, 6 months ago
Updated 5 August 2024, 3 months ago

Problem/Motivation

I am building a private site for which accounts are invite only. Accounts settings are:

  • Who can register accounts? Administrators only

We would like site members to use their Google account to login, which works great. However, in testing, we found that anyone with a Google account can use the Google Login and a new account is automatically created, bypassing the Account Settings that does not allow visitors to create a new account.

Steps to reproduce

  • Set Account Settings such that only administrators can register accounts
  • Login using a Google account that does not match an existing user account
  • Note that a new user is created and the visitor has access to the site

Proposed resolution

Google Login should respect the Account settings, and not create new accounts when an account matching the Google login is not found. Users who attempt to login with Google and no existing account is found should receive an error message.

🐛 Bug report
Status

RTBC

Version

9.2

Component

Code

Created by

🇺🇸United States michellezeedru

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024