Revert "Revert "SECURITY: Ensure oAuth authenticated email is the same as created user's email.""

This reverts commit 0e3def7d2b78053bb84cc432afc65228e66143aa.
This commit is contained in:
Guo Xiang Tan
2017-02-28 11:27:14 +08:00
parent 41c850f31d
commit e6d75f6844
3 changed files with 42 additions and 1 deletions

View File

@ -611,6 +611,8 @@ describe UsersController do
auth = session[:authentication] = {}
auth[:authenticator_name] = 'twitter'
auth[:extra_data] = twitter_auth
auth[:email_valid] = true
auth[:email] = @user.email
post_user