REGISTER_MANUAL_CONFIRM not working as expected

I want to setup gitea to authenticate via OpenID, but with gitea administrator having to confirm the registration.

The registration works, but the user can directly connect to gitea without administrator’s confirmation. Below are the service flags I used. (Gitea version: gitea-1.13.1-linux-amd64). Did I do or understand something wrong? If not is it a bug (then I will open a bug report)

[service]
DISABLE_REGISTRATION = false
ALLOW_ONLY_EXTERNAL_REGISTRATION = true
REGISTER_EMAIL_CONFIRM = false
REGISTER_MANUAL_CONFIRM = true

Edit: seems like a bug, I made a pull request Honor REGISTER_MANUAL_CONFIRM when doing openid registration by ganguin · Pull Request #14548 · go-gitea/gitea · GitHub