mirror of
https://github.com/flarum/framework.git
synced 2025-04-20 10:58:49 +08:00
c6aeeeb3c1
The change introduced in #1033 transformed any identification attribute returned from an OAuth provider to just a default value. When the identification attribute used by the provider is the email or username, this allowed the user to supply a different email or username and still getting an already-enabled account with the credentials he entered. Skipping attributes with an existing value makes no sense here because it's a always a fresh user and values from AbstractOAuth2Controller::getIdentification() should always be enforced.
Flarum Core
This repository contains Flarum's core code. If you want to set up a forum, visit the main Flarum repository.
Contributing
Flarum is open-source and we would love your help building it! Please read the Contributing Guide to learn how you can help.