appwrite/app
Steven Nguyen 92a307c164
Fix user identity attaching to wrong user
Suppose a user has 2 accounts on Appwrite:

1. joe@example.com
2. joe@gmail.com

Prior to this PR, if joe@example.com created a Google OAuth2 session
using his joe@gmail.com email, a new joe@gmail.com identity would be
created linked to joe@example.com.

This is especially problematic because if the user tried to create a
Google OAuth2 session using joe@gmail.com, Appwrite would lookup the
user via email and find the joe@gmail.com user, but then find an
identity from joe@example.com. This mismatching user ID would then
cause an error.

This PR prevents an identity from being created if the email from the
OAuth2 provider matches another user's email.
2023-12-13 18:45:05 +00:00
..
assets sync with 1.4 2023-10-03 19:50:48 +03:00
config Merge pull request #5174 from yatharth1706/fix-4797-verified-user-getting-email-verifications 2023-11-15 13:35:23 +01:00
console@49d039ed07 Bump console to version 3.2.7 2023-11-15 17:23:35 +00:00
controllers Fix user identity attaching to wrong user 2023-12-13 18:45:05 +00:00
views Upgrade executor 2023-10-19 11:54:56 +02:00
cli.php Merge remote-tracking branch 'origin/1.4.x' into feat-query-metadata 2023-10-25 18:21:16 +13:00
http.php chore: update database 2023-10-02 22:23:35 +00:00
init.php chore: update versions and changelog 2023-11-15 18:31:33 +00:00
preload.php Fix startup errors 2022-11-12 14:35:42 +00:00
realtime.php Merge pull request #7003 from appwrite/feat-query-metadata 2023-10-27 12:52:34 +13:00
worker.php Update db 2023-10-26 21:24:30 +13:00