can they also sign in using email? or only using social?

only social. we won't let direct e-mail logins.

yeah, that should work, as long as: 1. the login identifier is not the email but something else (username or whatever) 2. you don’t use the users email for recovery or verification Regarding migration - old users will use the old schema and new users the new schema. So it should be fine but it definitely needs some testing on your end! Maybe on a test environment first

Thank you very much @high-optician-2097 🙏 Putting the

email

on schema traits without special

<http://ory.sh/kratos|ory.sh/kratos>

just as metadata should not enable verification etc. we suppose? So we will just fork the

username + password

schema to add the e-mail field as metadata and disabling registration / signup with password 👌

Putting the

email

on schema traits without special

<http://ory.sh/kratos|ory.sh/kratos>

just as metadata should not enable verification etc. we suppose?

yes, that is correct

Something like this:

{
  "$id": "<https://schemas.ory.sh/presets/kratos/identity.username.schema.json>",
  "title": "Person",
  "type": "object",
  "properties": {
    "traits": {
      "type": "object",
      "properties": {
        "username": {
          "type": "string",
          "title": "Username",
          "maxLength": 100,
          "<http://ory.sh/kratos|ory.sh/kratos>": {
            "credentials": {
              "password": {
                "identifier": true
              },
              "webauthn": {
                "identifier": true
              },
              "totp": {
                "account_name": true
              }
            }
          }
        },
        "email": {
          "type": "string",
          "title": "Email",
          "maxLength": 200
        }
      },
      "required": [
        "username",
        "email"
      ],
      "additionalProperties": false
    }
  }
}