From d0d7d104ef8f347f8853b0e0f90ad9bfe70fe661 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Oct 2025 12:04:46 +0000
Subject: [PATCH 1/2] Initial plan


From 166435f2fe1ac881a5e99bea468e11700856c0ce Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 21 Oct 2025 12:10:47 +0000
Subject: [PATCH 2/2] Fix: Respect autoRegister setting for OIDC authentication

Prevent new user creation when autoRegister is disabled for auth providers

Co-authored-by: danielalves96 <62755605+danielalves96@users.noreply.github.com>
---
 apps/server/src/modules/auth-providers/service.ts | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/apps/server/src/modules/auth-providers/service.ts b/apps/server/src/modules/auth-providers/service.ts
index 5e7aa4a3..d0c9c316 100644
--- a/apps/server/src/modules/auth-providers/service.ts
+++ b/apps/server/src/modules/auth-providers/service.ts
@@ -617,6 +617,11 @@ export class AuthProvidersService {
       return await this.linkProviderToExistingUser(existingUser, provider.id, String(externalId), userInfo);
     }
 
+    // Check if auto-registration is disabled
+    if (provider.autoRegister === false) {
+      throw new Error(`User registration via ${provider.displayName || provider.name} is disabled`);
+    }
+
     return await this.createNewUserWithProvider(userInfo, provider.id, String(externalId));
   }