feat(oidc): permit auto/manual oidc account link/unlink

link are checking that email matches, +email alias are normalize into email
if email is already used on another account, link is not possible
not usurpation risk as the IDP is choosen by the admin
This commit is contained in:
Edouard Vanbelle
2026-08-08 17:19:05 +02:00
parent d8b3f2e026
commit e9495a63ad
20 changed files with 1791 additions and 135 deletions
+4 -1
View File
@@ -321,7 +321,10 @@ fn section_a2() {
let a = a2_after(user.clone());
assert_eq!(b.image, a.image, "A2 image differs");
assert_eq!(b.email, a.email, "A2 email differs");
assert_eq!(b.federation_issuer, a.federation_issuer, "A2 federation_issuer differs");
assert_eq!(
b.federation_issuer, a.federation_issuer,
"A2 federation_issuer differs"
);
assert_eq!(
b.can_edit_image, a.can_edit_image,
"A2 can_edit_image differs"