fix(web): Add AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING

[brendan-kellam]

Adds the boolean env var AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING (default: false) that, when enabled, will automatically link accounts with the same email address.

Summary by CodeRabbit

• New Features

  • Enterprise Edition: Added automatic linking of SSO accounts with matching email addresses.

• Documentation

  • Added enterprise configuration documentation for the email account linking feature.

[coderabbitai]

Caution

Review failed

The pull request is closed.

Walkthrough

Adds a new enterprise environment variable AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING (default false) to enable automatic linking of SSO accounts that share the same email. Updates include changelog, docs, server env schema, and propagation of the flag into SSO provider initializers (including a consolidated Authentik provider export).

Changes

Cohort / File(s)	Summary
Changelog & Docs CHANGELOG.md, docs/docs/configuration/environment-variables.mdx	Added an "Added" changelog entry and documentation for AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING describing default false and automatic SSO account linking behavior.
Environment Schema packages/shared/src/env.server.ts	Added AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING to the server env schema as a boolean with default 'false' and descriptive text.
SSO Providers packages/web/src/ee/features/sso/sso.ts	Read env.AUTH_EE_ALLOW_EMAIL_ACCOUNT_LINKING and pass an allowDangerousEmailAccountLinking flag into multiple provider initializers; introduced a single exported createAuthentikProvider(...); renamed a createGCPIAPProvider authorize parameter to _credentials.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Possibly related PRs

• feat(web): Add support for authentik sso #627: Modifies packages/web/src/ee/features/sso/sso.ts to add/support an Authentik SSO provider and related provider export changes.

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch bkellam/fix-SOU-354

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[claude]

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

[claude]

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.