@lobehub/lobehub 2.1.1 → 2.1.3

package/docs/self-hosting/{advanced/auth → auth}/providers/google.zh-CN.mdx

@@ -1,10 +1,10 @@
 ---
-title: 在 LobeChat 中配置 Google 身份验证
-description: 学习如何在 LobeChat 中配置 Google SSO，包括在 Google Cloud Console 创建 OAuth 凭证和设置环境变量。
+title: 在 LobeHub 中配置 Google 身份验证
+description: 学习如何在 LobeHub 中配置 Google SSO，包括在 Google Cloud Console 创建 OAuth 凭证和设置环境变量。
 tags:
   - Google
   - 身份验证
-  - LobeChat
+  - LobeHub
   - 单点登录
 ---
 
@@ -44,12 +44,12 @@ tags:
 
   ### 配置环境变量
 
-  | 环境变量                             | 类型 | 描述                                     |
-  | -------------------------------- | -- | -------------------------------------- |
-  | `AUTH_SECRET`                    | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成 |
-  | `AUTH_SSO_PROVIDERS`             | 必选 | 填写 `google`                            |
-  | `AUTH_GOOGLE_ID`                 | 必选 | Google Cloud Console 中的 Client ID      |
-  | `AUTH_GOOGLE_SECRET`             | 必选 | Google Cloud Console 中的 Client Secret  |
+  | 环境变量                 | 类型 | 描述                                     |
+  | -------------------- | -- | -------------------------------------- |
+  | `AUTH_SECRET`        | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成 |
+  | `AUTH_SSO_PROVIDERS` | 必选 | 填写 `google`                            |
+  | `AUTH_GOOGLE_ID`     | 必选 | Google Cloud Console 中的 Client ID      |
+  | `AUTH_GOOGLE_SECRET` | 必选 | Google Cloud Console 中的 Client Secret  |
 
   <Callout type={'tip'}>
     前往 [📘 环境变量](/zh/docs/self-hosting/environment-variables/auth#google)
@@ -58,7 +58,7 @@ tags:
 </Steps>
 
 <Callout type={'info'}>
-  部署成功后，用户将可以通过 Google 身份认证并使用 LobeChat。
+  部署成功后，用户将可以通过 Google 身份认证并使用 LobeHub。
 </Callout>
 
 ## 常见问题

package/docs/self-hosting/{advanced/auth → auth}/providers/keycloak.mdx

@@ -1,12 +1,12 @@
 ---
-title: Configuring Keycloak Authentication for LobeChat
+title: Configuring Keycloak Authentication for LobeHub
 description: >-
-  Learn how to configure Keycloak SSO for LobeChat, including creating a client
+  Learn how to configure Keycloak SSO for LobeHub, including creating a client
   and setting up environment variables.
 tags:
   - Keycloak
   - Authentication
-  - LobeChat
+  - LobeHub
   - Single Sign-On
 ---
 
@@ -52,13 +52,13 @@ tags:
 
   ### Configure Environment Variables
 
-  | Environment Variable             | Type     | Description                                                     |
-  | -------------------------------- | -------- | --------------------------------------------------------------- |
-  | `AUTH_SECRET`                    | Required | Session encryption key, generate with `openssl rand -base64 32` |
-  | `AUTH_SSO_PROVIDERS`             | Required | Set to `keycloak`                                               |
-  | `AUTH_KEYCLOAK_ID`               | Required | Client ID                                                       |
-  | `AUTH_KEYCLOAK_SECRET`           | Required | Client Secret                                                   |
-  | `AUTH_KEYCLOAK_ISSUER`           | Required | `https://your-keycloak-domain/realms/your-realm`                |
+  | Environment Variable   | Type     | Description                                                     |
+  | ---------------------- | -------- | --------------------------------------------------------------- |
+  | `AUTH_SECRET`          | Required | Session encryption key, generate with `openssl rand -base64 32` |
+  | `AUTH_SSO_PROVIDERS`   | Required | Set to `keycloak`                                               |
+  | `AUTH_KEYCLOAK_ID`     | Required | Client ID                                                       |
+  | `AUTH_KEYCLOAK_SECRET` | Required | Client Secret                                                   |
+  | `AUTH_KEYCLOAK_ISSUER` | Required | `https://your-keycloak-domain/realms/your-realm`                |
 
   <Callout type={'tip'}>
     Go to [📘 Environment Variables](/docs/self-hosting/environment-variables/auth#keycloak)
@@ -68,7 +68,7 @@ tags:
 
 <Callout type={'info'}>
   After successful deployment, users will be able to authenticate with Keycloak
-  and use LobeChat.
+  and use LobeHub.
 </Callout>
 
 ## Related Resources

package/docs/self-hosting/{advanced/auth → auth}/providers/keycloak.zh-CN.mdx

@@ -1,10 +1,10 @@
 ---
-title: 在 LobeChat 中配置 Keycloak 身份验证
-description: 学习如何在 LobeChat 中配置 Keycloak SSO，包括创建客户端和设置环境变量。
+title: 在 LobeHub 中配置 Keycloak 身份验证
+description: 学习如何在 LobeHub 中配置 Keycloak SSO，包括创建客户端和设置环境变量。
 tags:
   - Keycloak
   - 身份验证
-  - LobeChat
+  - LobeHub
   - 单点登录
 ---
 
@@ -50,13 +50,13 @@ tags:
 
   ### 配置环境变量
 
-  | 环境变量                             | 类型 | 描述                                               |
-  | -------------------------------- | -- | ------------------------------------------------ |
-  | `AUTH_SECRET`                    | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成           |
-  | `AUTH_SSO_PROVIDERS`             | 必选 | 填写 `keycloak`                                    |
-  | `AUTH_KEYCLOAK_ID`               | 必选 | Client ID                                        |
-  | `AUTH_KEYCLOAK_SECRET`           | 必选 | Client Secret                                    |
-  | `AUTH_KEYCLOAK_ISSUER`           | 必选 | `https://your-keycloak-domain/realms/your-realm` |
+  | 环境变量                   | 类型 | 描述                                               |
+  | ---------------------- | -- | ------------------------------------------------ |
+  | `AUTH_SECRET`          | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成           |
+  | `AUTH_SSO_PROVIDERS`   | 必选 | 填写 `keycloak`                                    |
+  | `AUTH_KEYCLOAK_ID`     | 必选 | Client ID                                        |
+  | `AUTH_KEYCLOAK_SECRET` | 必选 | Client Secret                                    |
+  | `AUTH_KEYCLOAK_ISSUER` | 必选 | `https://your-keycloak-domain/realms/your-realm` |
 
   <Callout type={'tip'}>
     前往 [📘 环境变量](/zh/docs/self-hosting/environment-variables/auth#keycloak)
@@ -65,7 +65,7 @@ tags:
 </Steps>
 
 <Callout type={'info'}>
-  部署成功后，用户将可以通过 Keycloak 身份认证并使用 LobeChat。
+  部署成功后，用户将可以通过 Keycloak 身份认证并使用 LobeHub。
 </Callout>
 
 ## 相关资源

package/docs/self-hosting/{advanced/auth → auth}/providers/logto.mdx

@@ -1,12 +1,12 @@
 ---
-title: Configuring Logto Authentication for LobeChat
+title: Configuring Logto Authentication for LobeHub
 description: >-
-  Learn how to configure Logto SSO for LobeChat, including creating an
+  Learn how to configure Logto SSO for LobeHub, including creating an
   application and setting up environment variables.
 tags:
   - Logto
   - Authentication
-  - LobeChat
+  - LobeHub
   - Single Sign-On
   - OIDC
 ---
@@ -21,7 +21,7 @@ tags:
   1. Log in to your Logto Console
   2. Go to **Applications** and click **Create application**
   3. Select **Traditional web** as the application type
-  4. Fill in the application name: `LobeChat`
+  4. Fill in the application name: `LobeHub`
   5. Configure redirect URIs:
 
   <Callout type={'info'}>
@@ -39,12 +39,12 @@ tags:
 
   ### Configure Environment Variables
 
-  When deploying LobeChat, you need to configure the following environment variables:
+  When deploying LobeHub, you need to configure the following environment variables:
 
   | Environment Variable        | Type     | Description                                                                   |
   | --------------------------- | -------- | ----------------------------------------------------------------------------- |
   | `AUTH_SECRET`               | Required | Key used to encrypt session tokens. Generate using: `openssl rand -base64 32` |
-  | `AUTH_SSO_PROVIDERS`        | Required | SSO provider for LobeChat. Use `logto` for Logto                              |
+  | `AUTH_SSO_PROVIDERS`        | Required | SSO provider for LobeHub. Use `logto` for Logto                               |
   | `AUTH_LOGTO_ID`             | Required | App ID from Logto application                                                 |
   | `AUTH_LOGTO_SECRET`         | Required | App Secret from Logto application                                             |
   | `AUTH_LOGTO_ISSUER`         | Required | Logto issuer URL (e.g., `https://your-tenant.logto.app/oidc`)                 |
@@ -56,7 +56,7 @@ tags:
 
   ### Configure Webhook (Optional)
 
-  Configure Logto [Webhook](https://docs.logto.io/developers/webhooks/configure-webhooks) to sync user data updates to LobeChat.
+  Configure Logto [Webhook](https://docs.logto.io/developers/webhooks/configure-webhooks) to sync user data updates to LobeHub.
 
   1. Go to **Webhooks** in Logto Console and create a Webhook
   2. Fill in the following fields:
@@ -68,7 +68,7 @@ tags:
 </Steps>
 
 <Callout type={'info'}>
-  After successful deployment, users will be able to authenticate with Logto and use LobeChat.
+  After successful deployment, users will be able to authenticate with Logto and use LobeHub.
 </Callout>
 
 ## Related Resources

package/docs/self-hosting/{advanced/auth → auth}/providers/logto.zh-CN.mdx

@@ -1,10 +1,10 @@
 ---
-title: 在 LobeChat 中配置 Logto 身份验证
-description: 学习如何在 LobeChat 中配置 Logto SSO，包括创建应用和设置环境变量。
+title: 在 LobeHub 中配置 Logto 身份验证
+description: 学习如何在 LobeHub 中配置 Logto SSO，包括创建应用和设置环境变量。
 tags:
   - Logto
   - 身份验证
-  - LobeChat
+  - LobeHub
   - 单点登录
   - OIDC
 ---
@@ -19,7 +19,7 @@ tags:
   1. 登录 Logto 控制台
   2. 前往 **Applications**，点击 **Create application**
   3. 选择 **Traditional web** 作为应用类型
-  4. 填写应用名称：`LobeChat`
+  4. 填写应用名称：`LobeHub`
   5. 配置重定向 URI：
 
   <Callout type={'info'}>
@@ -37,7 +37,7 @@ tags:
 
   ### 配置环境变量
 
-  在部署 LobeChat 时，你需要配置以下环境变量：
+  在部署 LobeHub 时，你需要配置以下环境变量：
 
   | 环境变量                        | 类型 | 描述                                                        |
   | --------------------------- | -- | --------------------------------------------------------- |
@@ -54,7 +54,7 @@ tags:
 
   ### 配置 Webhook（可选）
 
-  配置 Logto 的 [Webhook](https://docs.logto.io/developers/webhooks/configure-webhooks)，以便在用户信息更新时 LobeChat 可以接收到通知并同步数据。
+  配置 Logto 的 [Webhook](https://docs.logto.io/developers/webhooks/configure-webhooks)，以便在用户信息更新时 LobeHub 可以接收到通知并同步数据。
 
   1. 前往 Logto 控制台的 `Webhooks`，创建一个 Webhook
   2. 填写以下字段：
@@ -65,7 +65,7 @@ tags:
   3. 创建后，复制 `签名密钥` 填写到环境变量 `LOGTO_WEBHOOK_SIGNING_KEY`
 </Steps>
 
-<Callout type={'info'}>部署成功后，用户将可以通过 Logto 身份认证并使用 LobeChat。</Callout>
+<Callout type={'info'}>部署成功后，用户将可以通过 Logto 身份认证并使用 LobeHub。</Callout>
 
 ## 相关资源
 

package/docs/self-hosting/{advanced/auth → auth}/providers/microsoft.mdx

@@ -1,14 +1,14 @@
 ---
-title: Configuring Microsoft Authentication for LobeChat
+title: Configuring Microsoft Authentication for LobeHub
 description: >-
-  Learn how to configure Microsoft (Entra ID / Azure AD) SSO for LobeChat,
+  Learn how to configure Microsoft (Entra ID / Azure AD) SSO for LobeHub,
   including creating applications in Azure Portal and setting up environment
   variables.
 tags:
   - Microsoft
   - Authentication
   - Azure AD
-  - LobeChat
+  - LobeHub
   - Single Sign-On
 ---
 
@@ -70,12 +70,12 @@ tags:
 
   ### Configure Environment Variables
 
-  | Environment Variable             | Type     | Description                                                     |
-  | -------------------------------- | -------- | --------------------------------------------------------------- |
-  | `AUTH_SECRET`                    | Required | Session encryption key, generate with `openssl rand -base64 32` |
-  | `AUTH_SSO_PROVIDERS`             | Required | Set to `microsoft`                                              |
-  | `AUTH_MICROSOFT_ID`              | Required | Application (client) ID                                         |
-  | `AUTH_MICROSOFT_SECRET`          | Required | Client secret value                                             |
+  | Environment Variable    | Type     | Description                                                     |
+  | ----------------------- | -------- | --------------------------------------------------------------- |
+  | `AUTH_SECRET`           | Required | Session encryption key, generate with `openssl rand -base64 32` |
+  | `AUTH_SSO_PROVIDERS`    | Required | Set to `microsoft`                                              |
+  | `AUTH_MICROSOFT_ID`     | Required | Application (client) ID                                         |
+  | `AUTH_MICROSOFT_SECRET` | Required | Client secret value                                             |
 
   <Callout type={'info'}>
     **Alternative Environment Variables**: For backward compatibility, these
@@ -94,14 +94,14 @@ tags:
 
 <Callout type={'info'}>
   After successful deployment, users will be able to authenticate with Microsoft
-  and use LobeChat.
+  and use LobeHub.
 </Callout>
 
 ## Common Issues
 
 ### Tenant Configuration
 
-By default, LobeChat uses `common` tenant which allows both organizational and personal Microsoft accounts. If you need single-tenant configuration, you may need to customize the tenant settings.
+By default, LobeHub uses `common` tenant which allows both organizational and personal Microsoft accounts. If you need single-tenant configuration, you may need to customize the tenant settings.
 
 ### Client Secret Expiration
 

package/docs/self-hosting/{advanced/auth → auth}/providers/microsoft.zh-CN.mdx

@@ -1,13 +1,13 @@
 ---
-title: 在 LobeChat 中配置 Microsoft 身份验证
+title: 在 LobeHub 中配置 Microsoft 身份验证
 description: >-
-  学习如何在 LobeChat 中配置 Microsoft (Entra ID / Azure AD) SSO，包括在 Azure Portal
+  学习如何在 LobeHub 中配置 Microsoft (Entra ID / Azure AD) SSO，包括在 Azure Portal
   创建应用和设置环境变量。
 tags:
   - Microsoft
   - 身份验证
   - Azure AD
-  - LobeChat
+  - LobeHub
   - 单点登录
 ---
 
@@ -68,12 +68,12 @@ tags:
 
   ### 配置环境变量
 
-  | 环境变量                             | 类型 | 描述                                     |
-  | -------------------------------- | -- | -------------------------------------- |
-  | `AUTH_SECRET`                    | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成 |
-  | `AUTH_SSO_PROVIDERS`             | 必选 | 填写 `microsoft`                         |
-  | `AUTH_MICROSOFT_ID`              | 必选 | Application (client) ID                |
-  | `AUTH_MICROSOFT_SECRET`          | 必选 | 客户端密钥值                                 |
+  | 环境变量                    | 类型 | 描述                                     |
+  | ----------------------- | -- | -------------------------------------- |
+  | `AUTH_SECRET`           | 必选 | 会话加密密钥，使用 `openssl rand -base64 32` 生成 |
+  | `AUTH_SSO_PROVIDERS`    | 必选 | 填写 `microsoft`                         |
+  | `AUTH_MICROSOFT_ID`     | 必选 | Application (client) ID                |
+  | `AUTH_MICROSOFT_SECRET` | 必选 | 客户端密钥值                                 |
 
   <Callout type={'info'}>
     **兼容的环境变量**：为了向后兼容，以下别名也支持：
@@ -90,14 +90,14 @@ tags:
 </Steps>
 
 <Callout type={'info'}>
-  部署成功后，用户将可以通过 Microsoft 身份认证并使用 LobeChat。
+  部署成功后，用户将可以通过 Microsoft 身份认证并使用 LobeHub。
 </Callout>
 
 ## 常见问题
 
 ### 租户配置
 
-默认情况下，LobeChat 使用 `common` 租户，允许组织帐户和个人 Microsoft 帐户登录。如果需要单租户配置，可能需要自定义租户设置。
+默认情况下，LobeHub 使用 `common` 租户，允许组织帐户和个人 Microsoft 帐户登录。如果需要单租户配置，可能需要自定义租户设置。
 
 ### 客户端密钥过期
 

package/docs/self-hosting/{advanced/auth → auth}/providers/okta.mdx

@@ -1,12 +1,12 @@
 ---
-title: Configuring Okta Authentication for LobeChat
+title: Configuring Okta Authentication for LobeHub
 description: >-
-  Learn how to configure Okta SSO for LobeChat, including creating an
+  Learn how to configure Okta SSO for LobeHub, including creating an
   application and setting up environment variables.
 tags:
   - Okta
   - Authentication
-  - LobeChat
+  - LobeHub
   - Single Sign-On
   - OIDC
 ---
@@ -25,7 +25,7 @@ tags:
      - Sign-in method: **OIDC - OpenID Connect**
      - Application type: **Web Application**
   5. Configure the application:
-     - App integration name: `LobeChat`
+     - App integration name: `LobeHub`
      - Sign-in redirect URIs: Add your callback URL
 
   <Callout type={'info'}>
@@ -42,15 +42,15 @@ tags:
 
   ### Configure Environment Variables
 
-  When deploying LobeChat, you need to configure the following environment variables:
+  When deploying LobeHub, you need to configure the following environment variables:
 
-  | Environment Variable             | Type     | Description                                                                   |
-  | -------------------------------- | -------- | ----------------------------------------------------------------------------- |
-  | `AUTH_SECRET`                    | Required | Key used to encrypt session tokens. Generate using: `openssl rand -base64 32` |
-  | `AUTH_SSO_PROVIDERS`             | Required | SSO provider for LobeChat. Use `okta` for Okta                                |
-  | `AUTH_OKTA_ID`                   | Required | Client ID from Okta application                                               |
-  | `AUTH_OKTA_SECRET`               | Required | Client Secret from Okta application                                           |
-  | `AUTH_OKTA_ISSUER`               | Required | Okta issuer URL (e.g., `https://your-okta-domain.okta.com`)                   |
+  | Environment Variable | Type     | Description                                                                   |
+  | -------------------- | -------- | ----------------------------------------------------------------------------- |
+  | `AUTH_SECRET`        | Required | Key used to encrypt session tokens. Generate using: `openssl rand -base64 32` |
+  | `AUTH_SSO_PROVIDERS` | Required | SSO provider for LobeHub. Use `okta` for Okta                                 |
+  | `AUTH_OKTA_ID`       | Required | Client ID from Okta application                                               |
+  | `AUTH_OKTA_SECRET`   | Required | Client Secret from Okta application                                           |
+  | `AUTH_OKTA_ISSUER`   | Required | Okta issuer URL (e.g., `https://your-okta-domain.okta.com`)                   |
 
   <Callout type={'tip'}>
     Go to [📘 Environment Variables](/docs/self-hosting/environment-variables/auth#okta) for detailed information on these variables.
@@ -58,7 +58,7 @@ tags:
 </Steps>
 
 <Callout type={'info'}>
-  After successful deployment, users will be able to authenticate with Okta and use LobeChat.
+  After successful deployment, users will be able to authenticate with Okta and use LobeHub.
 </Callout>
 
 ## Related Resources

package/docs/self-hosting/{advanced/auth → auth}/providers/okta.zh-CN.mdx

@@ -1,10 +1,10 @@
 ---
-title: 在 LobeChat 中配置 Okta 身份验证
-description: 学习如何在 LobeChat 中配置 Okta SSO，包括创建应用和设置环境变量。
+title: 在 LobeHub 中配置 Okta 身份验证
+description: 学习如何在 LobeHub 中配置 Okta SSO，包括创建应用和设置环境变量。
 tags:
   - Okta
   - 身份验证
-  - LobeChat
+  - LobeHub
   - 单点登录
   - OIDC
 ---
@@ -23,7 +23,7 @@ tags:
      - Sign-in method: **OIDC - OpenID Connect**
      - Application type: **Web Application**
   5. 配置应用：
-     - App integration name: `LobeChat`
+     - App integration name: `LobeHub`
      - Sign-in redirect URIs: 添加回调 URL
 
   <Callout type={'info'}>
@@ -40,22 +40,22 @@ tags:
 
   ### 配置环境变量
 
-  在部署 LobeChat 时，你需要配置以下环境变量：
+  在部署 LobeHub 时，你需要配置以下环境变量：
 
-  | 环境变量                             | 类型 | 描述                                                      |
-  | -------------------------------- | -- | ------------------------------------------------------- |
-  | `AUTH_SECRET`                    | 必选 | 用于加密会话令牌的密钥。使用以下命令生成：`openssl rand -base64 32`          |
-  | `AUTH_SSO_PROVIDERS`             | 必选 | SSO 提供商。使用 Okta 请填写 `okta`                              |
-  | `AUTH_OKTA_ID`                   | 必选 | Okta 应用的 Client ID                                      |
-  | `AUTH_OKTA_SECRET`               | 必选 | Okta 应用的 Client Secret                                  |
-  | `AUTH_OKTA_ISSUER`               | 必选 | Okta Issuer URL（例如 `https://your-okta-domain.okta.com`） |
+  | 环境变量                 | 类型 | 描述                                                      |
+  | -------------------- | -- | ------------------------------------------------------- |
+  | `AUTH_SECRET`        | 必选 | 用于加密会话令牌的密钥。使用以下命令生成：`openssl rand -base64 32`          |
+  | `AUTH_SSO_PROVIDERS` | 必选 | SSO 提供商。使用 Okta 请填写 `okta`                              |
+  | `AUTH_OKTA_ID`       | 必选 | Okta 应用的 Client ID                                      |
+  | `AUTH_OKTA_SECRET`   | 必选 | Okta 应用的 Client Secret                                  |
+  | `AUTH_OKTA_ISSUER`   | 必选 | Okta Issuer URL（例如 `https://your-okta-domain.okta.com`） |
 
   <Callout type={'tip'}>
     前往 [📘 环境变量](/zh/docs/self-hosting/environment-variables/auth#okta) 可查阅相关变量详情。
   </Callout>
 </Steps>
 
-<Callout type={'info'}>部署成功后，用户将可以通过 Okta 身份认证并使用 LobeChat。</Callout>
+<Callout type={'info'}>部署成功后，用户将可以通过 Okta 身份认证并使用 LobeHub。</Callout>
 
 ## 相关资源
 

package/docs/self-hosting/auth/providers/password.mdx

@@ -0,0 +1,112 @@
+---
+title: Configuring Email/Password Authentication for LobeHub
+description: >-
+  Learn how to configure email and password authentication for LobeHub,
+  including enabling/disabling options and SSO-only mode.
+tags:
+  - Email
+  - Password
+  - Authentication
+  - LobeHub
+---
+
+# Configuring Email/Password Authentication
+
+LobeHub supports traditional email and password authentication out of the box.
+This guide covers the available configuration options.
+
+## Default Behavior
+
+By default, email/password authentication is enabled.
+Users can register with their email address and set a password.
+
+## Configuration Options
+
+### Disable Email/Password Authentication (SSO-Only Mode)
+
+If you want to force users to authenticate via SSO providers only,
+set the following environment variable:
+
+| Environment Variable          | Type     | Description                                |
+| ----------------------------- | -------- | ------------------------------------------ |
+| `AUTH_DISABLE_EMAIL_PASSWORD` | Optional | Set to `1` to disable email/password login |
+
+When enabled:
+
+- The email input field is hidden on the login page
+- Only SSO provider buttons are displayed
+- The signup page redirects to the login page
+- Users must authenticate through configured SSO providers
+
+<Callout type={'warning'}>
+  Before enabling SSO-only mode, ensure you have configured at least one SSO
+  provider via `AUTH_SSO_PROVIDERS`. Otherwise, users will have no way to log
+  in.
+</Callout>
+
+### Enable Email Verification
+
+To require users to verify their email address before signing in:
+
+| Environment Variable      | Type     | Description                              |
+| ------------------------- | -------- | ---------------------------------------- |
+| `AUTH_EMAIL_VERIFICATION` | Optional | Set to `1` to require email verification |
+
+This requires configuring an email service (SMTP).
+See [Email Service Configuration](/docs/self-hosting/auth/email) for details.
+
+### Enable Magic Link Login
+
+To allow passwordless login via email magic links:
+
+| Environment Variable     | Type     | Description                           |
+| ------------------------ | -------- | ------------------------------------- |
+| `AUTH_ENABLE_MAGIC_LINK` | Optional | Set to `1` to enable magic link login |
+
+This also requires configuring an email service (SMTP).
+
+## Change Password
+
+Users can change their password in two ways:
+
+1. **Profile Settings**: Go to Settings > Profile to change password
+2. **Forgot Password**: On the login page, enter email, proceed to the password step, then click "Forgot Password" below the password input
+
+<Callout type={'info'}>
+  Both methods require email service (SMTP) to be configured for sending
+  password reset emails.
+</Callout>
+
+## Example Configurations
+
+### SSO-Only (Disable Email/Password)
+
+```bash
+AUTH_DISABLE_EMAIL_PASSWORD=1
+AUTH_SSO_PROVIDERS=google,github
+```
+
+### Email/Password with Verification
+
+```bash
+AUTH_EMAIL_VERIFICATION=1
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=noreply@example.com
+SMTP_PASS=your-password
+```
+
+### Email/Password with Magic Link
+
+```bash
+AUTH_ENABLE_MAGIC_LINK=1
+SMTP_HOST=smtp.example.com
+SMTP_PORT=587
+SMTP_USER=noreply@example.com
+SMTP_PASS=your-password
+```
+
+<Callout type={'tip'}>
+  Go to [Environment Variables](/docs/self-hosting/environment-variables/auth)
+  for detailed information on all authentication variables.
+</Callout>