Skip to content

[5.x] Fix OAuth #14887

Merged
jasonvarga merged 2 commits into
5.xfrom
fix-oauth
Jun 26, 2026
Merged

[5.x] Fix OAuth #14887
jasonvarga merged 2 commits into
5.xfrom
fix-oauth

Conversation

@jasonvarga

@jasonvarga jasonvarga commented Jun 26, 2026

Copy link
Copy Markdown
Member

This prevents trusting providers that do not guarantee that the email is verified.

This only applies to using oauth for the first time to link to an existing account.

Using oauth from any provider will still work to create completely fresh accounts.

@jasonvarga jasonvarga marked this pull request as ready for review June 26, 2026 16:28
@jasonvarga jasonvarga merged commit e59dd34 into 5.x Jun 26, 2026
13 checks passed
@jasonvarga jasonvarga deleted the fix-oauth branch June 26, 2026 16:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant