OMG indeed! I don’t know how it’s taken this long to explain this to you guys. It was a problem for me from my very first time using Discourse five years ago. I don’t know if I posted about it then, but I have seen this question a bunch of times since then. I needed it again for a client last fall and I didn’t bother to ask.
In order to join any Discourse instance ever created, users must have an email address. How else can users create a Discourse account? Via passenger pigeon? Telegraph? Smoke signals? Fax machines?
This is explicitly about sites with “staff must approve all new users” set. It’s a really narrow condition, since I view the Discourse default in the wild as open user signup …
I’m sure that I’ve seen the exact example that Sam just described multiple times. You have a community that you want mostly private. You don’t know people’s email addresses,but have some other way to communicate with them.
I know I’ve used the example of wanting to invite people to join a private forum at a conference by sharing a URL and a code or password on a slide as an example.
The idea is that this feature is used instead of staff approval. (it could be used if you also were concerned that lots of bots would request accounts, but that does seem unlikely)
Replace “username” in the OP with “invite token”. Does that make sense?
That’s not the way I read it. It’s not that the users don’t have email addresses but that they have email addresses that I don’t have to be able to invite them.
I could see an invite code being seen as more personal which is good for community. It could also be associated with automatic group membership too for sites with premium sections.
I support this as a way of bypassing new user approval (for approval required sites) and maybe even granting special group membership but as a super suuuuper janky low-end form of http auth password… not so much?
I can also support it as “generate a generic https link that will make the new user signup show up as as someone I invited” as well.
But as a form of weirdo old school 2001 “enter the sekrit HTTP username/pass to access this website” … I really just cannot support this, as stated. I’m sorry, but I can’t. That’d be going actively backwards.