Summary

Adds a new is_oauth_registration_enabled setting so administrators can allow OAuth-based self-registration while keeping general (password-based) registration disabled. Closes #8042.

Changes

  • Migration: Adds is_oauth_registration_enabled boolean column to instance_settings (default: false)
  • OauthController: OAuth callback now allows new user creation when either is_registration_enabled OR is_oauth_registration_enabled is true
  • Advanced Settings (Livewire): Added property, validation rule, mount/save logic
  • Blade view: Added checkbox toggle with helper text in admin Advanced settings

How it works

General Registration OAuth Registration Result
✓ Enabled Any Anyone can register (password + OAuth)
✗ Disabled ✓ Enabled Only OAuth users can self-register
✗ Disabled ✗ Disabled No self-registration (admin creates accounts)

Existing OAuth users can always log in regardless of these settings — these only affect new account creation.

Testing

Verified the OAuth callback logic handles all three scenarios correctly. The setting follows the same pattern as existing boolean settings (is_registration_enabled, do_not_track, etc.).

/claim #8042

Claim

Total prize pool $50
Total paid $0
Status Pending
Submitted March 22, 2026
Last updated March 22, 2026

Contributors

GU

Guillem Prada Torres

@GPradaT

100%

Sponsors

KE

Kewyn Ferreira

@kewynf

$50