I am building a community portal where I will use OAuth2 to link the provider and Discourse. I want to allow email login only if the email is invited to the community (so there should be no registration button), but I want to allow all OAuth2 logins. I cannot seem to work this out with the OAuth2 /…

Ah. Yeah. Darn. My next guess is that you’d need to fork the oauth2 plugin and have it override the invite-only setting.

[image] steve.bussey: I want to allow email login only if the email is invited to the community (so there should be no registration button), I think you just need to turn on invite only. Have you done that and it’s not doing what you need? [image] steve.bussey: I want to allow all OAuth2…

[image] pfaffman: I think you just need to turn on invite only . Have you done that and it’s not doing what you need? Fair question. This is the first thing I tried. Here’s what happens (this is post oauth flow): [image] Next stop was to uncheck “enable new registrations”: I can’t post th…

[image] steve.bussey: This is the first thing I tried. Here’s what happens (this is post oauth flow): What do you want to happen if someone who hasn’t been invited tries to log in? Oh! Are you saying that this is what someone sees if they try to respond to an invite link? You want to accept…

Additional explanation may be helpful to get across the goal: I am setting up a semi-private community where there are 3 types of users: staff members (email login), application users (SSO provided via OAuth2), special guests (email, not app users). I want to require invites for special guests (all…

[image] steve.bussey: I want to treat OAuth2 users as “trusted” and they don’t require an invite. That’s the bit that I was missing! I think, but I’m not sure, that external auth skip create confirm might be what you’re looking for. The description mentions only SSO, but I think it now works…

I will try that with the various other options. Here are the results: Invite only + external skip: [image] invite only, external skip, disable email login: [image] It looks like these ones won’t work.

Thanks @pfaffman , that seems to be what I’ve come to accept. I don’t think it’s possible for hosted Discourse, right? If not, I may need to figure out something else for it.

OAuth2 + email login without sign up form

Support Self-hosting

system (system) Closed December 8, 2020, 3:37am 10

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
OAuth2 with "Invite Only" enabled? Support	2	488	June 30, 2022
New users clicking category link see “access to this forum is by invite only” and cannot log in via OAuth2 SSO invites , oauth2	4	116	February 5, 2026
Invite Only with OpenID only does not work Bug openid-connect	3	98	January 20, 2026
Custom Provider log-in with OAuth only sign-up/log-in SSO oauth2	0	562	June 12, 2023
Invite Only with External Accounts SSO oauth2 , invites	14	1245	October 18, 2023

OAuth2 + email login without sign up form

Related topics