mirror of
https://github.com/flarum/core.git
synced 2025-02-24 19:23:01 +01:00
The change introduced in #1033 transformed any identification attribute returned from an OAuth provider to just a default value. When the identification attribute used by the provider is the email or username, this allowed the user to supply a different email or username and still getting an already-enabled account with the credentials he entered. Skipping attributes with an existing value makes no sense here because it's a always a fresh user and values from AbstractOAuth2Controller::getIdentification() should always be enforced.
…
…
Flarum Core
This repository contains Flarum's core code. If you want to set up a forum, visit the main Flarum repository.
Contributing
Flarum is open-source and we would love your help building it! Please read the Contributing Guide to learn how you can help.
Description
Languages
PHP
65.5%
JavaScript
14.2%
TypeScript
13.9%
Less
5.5%
Blade
0.7%
Other
0.2%