appwrite

mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00

Files

T

Steven Nguyen 92a307c164 Fix user identity attaching to wrong user

Suppose a user has 2 accounts on Appwrite:

1. joe@example.com
2. joe@gmail.com

Prior to this PR, if joe@example.com created a Google OAuth2 session
using his joe@gmail.com email, a new joe@gmail.com identity would be
created linked to joe@example.com.

This is especially problematic because if the user tried to create a
Google OAuth2 session using joe@gmail.com, Appwrite would lookup the
user via email and find the joe@gmail.com user, but then find an
identity from joe@example.com. This mismatching user ID would then
cause an error.

This PR prevents an identity from being created if the email from the
OAuth2 provider matches another user's email.

2023-12-13 18:45:05 +00:00

account.php

Fix user identity attaching to wrong user

2023-12-13 18:45:05 +00:00

avatars.php

sync with 1.4

2023-10-02 17:02:48 +03:00

console.php

sync with 1.4

2023-10-02 17:02:48 +03:00

databases.php

Ensure usage endpoints don't throw 500 when usage is disabled