Allow invitation to self hosted instance without organization

[hejado (Nico Prediger)]

I’m self-hosting a bitwarden instance and want to disable user registration. That does not mean, I don’t want any of my friends or family members to register; I just don’t want strangers/spam accounts to do so.

Currently, I’ll have to SSH into my server, enable registration, restart bitwarden, then wait for the new account to be created, hope nobody else uses this time window to create a new account, then SSH into my server again, disable registration again and restart bitwarden again. For every new account.

It seems, ignoring the disableUserRegistration setting in selected cases is possible:

Allow invited people to register even if registrations are disabled

Hi, When we set disableUserRegistration=true in server configuration, users who have been invited to an organization can’t register. Would then be nice to allow registration of invited users, even if disableUserRegistration is enabled. This would allow to decide who is allowed to register, sending legitimate users an invitation to join the organization. Thx !

While being able to invite new users to an organization is nice, I’d like to be able to do so without an organization for the instance itself.

• disableUserRegistration=true should be set
• If I invite a user via email, a user account should be allowed to register using that email
• The link in the email may only be valid for a certain amount of time (?)
• Bonus points if I can customize the text of the invitation email to include a GDPR link or something like that.

While sending an invite with a link would be the nicer way of doing this, whitelisting email addresses that are allowd to bypass the disableUserRegistration would also suffice.