I was under the impression that the options EMAIL_DOMAIN_WHITELIST and REGISTER_EMAIL_CONFIRM (under [service]) could control, that only users with email addresses from whitelisted domains could register as only they would receive the email comfirmation link.
It appears this is not so when allowing users to register externally, in my case using github oidc. I noted gitea sending emails to non-whitelisted domains. Is this due to some misconfiguration I have missed or is this a genuine issue in the registration logic?
Thanks and many thanks for developing gitea!