You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While reviewing the code I found that OAuth-created accounts are treated differently than oauth-linked accounts.
Currently under Manage account links (/user/settings/security) they cannot be unlinked from the oauth provider that created them, despite having their own username and email address.
I believe this is the desired behavior when ALLOW_ONLY_EXTERNAL_REGISTRATION is set, but should probably not be the behavior generally.
I'll include the fix in with another related PR, but I wanted to document it separately here for now.
The text was updated successfully, but these errors were encountered:
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.
While reviewing the code I found that OAuth-created accounts are treated differently than oauth-linked accounts.
Currently under Manage account links (
/user/settings/security
) they cannot be unlinked from the oauth provider that created them, despite having their own username and email address.I believe this is the desired behavior when
ALLOW_ONLY_EXTERNAL_REGISTRATION
is set, but should probably not be the behavior generally.I'll include the fix in with another related PR, but I wanted to document it separately here for now.
The text was updated successfully, but these errors were encountered: