Clark Winkelmann 31b925164c Always apply attributes from token when registering ...

The change introduced in #1033 transformed any identification attribute returned from an OAuth provider to just a default value.

When the identification attribute used by the provider is the email or username, this allowed the user to supply a different email or username and still getting an already-enabled account with the credentials he entered.

Skipping attributes with an existing value makes no sense here because it's a always a fresh user and values from AbstractOAuth2Controller::getIdentification() should always be enforced.

2018-01-06 20:04:42 +10:30

..

core

Always apply attributes from token when registering

2018-01-06 20:04:42 +10:30