lukevella/rallly v4.15.2

on GitHub

🔐 SSO-only instances could not create new accounts

Setting EMAIL_LOGIN_ENABLED=false also switched off user registration (#3335). That coupling had been there since the variable was introduced, but v4.15.0 started enforcing the registration setting at the point where an account is created, on every sign-in path. From that release an instance configured for SSO only could no longer provision accounts on first sign-in, and neither REGISTRATION_ENABLED nor the control panel toggle had any effect while email login was off. The control panel reported the setting as configured by environment variable even when only EMAIL_LOGIN_ENABLED was set, which pointed at the wrong cause.

Registration is now controlled by REGISTRATION_ENABLED and the control panel toggle alone:

• EMAIL_LOGIN_ENABLED=false only removes email sign-in. New users can still register through SSO.
• REGISTRATION_ENABLED=false, or disabling registration in the control panel, blocks new accounts on every path (email code and SSO) while existing users keep signing in.

The EMAIL_LOGIN_ENABLED entry in the configuration docs no longer claims it disables registration.

Thanks to @qay21 for the report and the diagnosis.

What's Changed

• 🐛 Decouple registration from email login (#3337)

Full Changelog: v4.15.1...v4.15.2