main ← Jackzhang144:add-dc-provider-email-option
closed 02:16AM - 23 May 26 UTC
Adds a new site setting `discourse_connect_provider_provides_email` (default: tr…ue) to control whether user email is included in the SSO redirect URL. This maintains backward compatibility while allowing admins to disable email exposure for privacy reasons.
See: https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980