Invite existing users via list

[dwestness]

In our organization, we have many vaultwarden users and many organizations
It would be nice if when inviting a user to an organization, it would be possible to select the user from a list of existing vaultwarden users.

Currently you need to know their email address and type/paste it in, but that is cumbersome and error prone in many cases.

For example, our company has many email domains and sometimes people's primary email addresses change as roles change and departments restructure.

So [email protected] changed to [email protected] .... but they signed up for vaultwarden under [email protected] and never took the manual steps to change their email address in vaultwarden directly.
So when another managers invites them to their org and send the invite to [email protected] it doesn't really work.. They get the email but it doesn't match their vaultwarden user so it's disconnected and they cannot accept the invite and they are confused on why things aren't working.

[bokkabonga]

I don´t think that this would be desirable. That would mean, any registered user could get a list of all accounts on the server. While that might be ok for your usecase there are a lot of other scenarios (including ours) where you don´t want that to happen

[BlackDex]

You can always create something like this your self by using the admin backend and the bw serve feature i guess.
But as @bokkabonga mentions that will not happen from our side.

Also, this would mean adjusting the web-vault, which we do not want. We want to keep in-line with upstream Bitwarden, and only make adjustments which are needed for Vaultwarden to work, and that mainly is telling the web-vault it's a premium and remove some features we do not have/want.

[dwestness]

I understand my use case might not be suitable for all and naturally having to fork the web-vault would cause a lot of technical debt i'm sure we don't want to own, so I totally get that.

Thanks for the considerations either way!

[stefan0xC]

For example, our company has many email domains and sometimes people's primary email addresses change as roles change and departments restructure.

You should probably tell them to change their email address in Vaultwarden if that happens because once the new address has been invited as a user you cannot simply change your email to that address anymore. You'd first had to delete the user account associated with the new mail (which you could do without registering a new account by opening /#/recover-delete manually) or as organization owner by contacting an system administrator to delete the unregistered user account for the invited mail address via the /admin panel.

[stefan0xC]

I think we could improve this a bit by linking to the {{ url }}/#/recover-delete page in the mail to the existing account if the requested mail address has not been registered yet (i.e. their password_hash.is_empty()). The main consideration would be that this would have to be worded carefully so that it's clear which email address you have to enter so that a user does not delete the wrong account by accident.
edit: I've created a PR that enables us to do that #6377