Just installed from docker the latest 1.8.0.beta7. I think I stumbled upon a bug. Here's what I did:
login required in Settings (it's a closed discussion forum)
- sent invite to a user
- user got the invite and clicks the link
- user got to the page asking for their username and optional password
- user fills in both fields and clicks "accept invitation"
- the interface logs them in automatically (no further emails are sent)
- user logs out
- user tries to log back in, but now interface says:
You can't log in yet. We previously sent an activation email to you at email@example.com. Please follow the instructions in that email to activate your account. Click here to send the activation email again.
- this is false, an activation email was not sent
- user clicks on "here" to resend activation email
- interface then says:
Sorry, this account has already been activated.
- which is true, but it is not approved, here's what the Admin > Users panel shows for their account:
- user is stuck and can no longer login
If the user does not fill in the password at step 5. above, then an activation email is actually sent, and the user can properly activate the account and login. But this is cumbersome and impractical as I would need to warn all users in advance...
This must be a bug, right?
I tried quite a few combinations in Settings. This happens whether or not
invite only is checked. Here are the relevant Login settings: