your summary sounds correct.
And yes, the NodeBB database is independent, you can use MongoDB
is there a way to get an antispam question/recaptcha before a user uses SSO to register/login?
Thanks and kind regards,
seems like I need to clarify my question...
The reason for the recaptcha/antispam question before SSO, is to avoid spammers using scripts to use SSO with a burner account (which I am seeing here on this forum). That is one way to avoid spam filters and creating more spam, which can annoy some forum users/admins.
So in other words...
click on Register -> click on SSO link -> Antispam question/recaptcha -> then click SSO login/agree button