When registration is disabled, users with a valid invite link can now register via OIDC/SSO. The invite token is passed from the login page through the OIDC state, validated on callback, and used to bypass the allow_registration check. Invite usage count is incremented after successful registration.