[FEATURE]: Ensure correct handling of Password login vs oidc login #171

New issue

Closed

opened 2025-09-26 13:40:23 +02:00 by simon · 0 comments

simon commented

2025-09-26 13:40:23 +02:00

Owner

Description

I want to make sure, that password login and oidc login work as expected.
additional to the users ID, for authentication we also have an email id or an oidc id, respective of the authentication method used.

If a login via OIDC matches an oidc_id

update user.mail, if it differs
- should also trigger member.mail change

If a login via OIDC doesn't match an oidc_id

if a user with the same user.mail exists, ask for password and set oidc_id for user
if no matching mail exists, create a new user from oidc-details

Acceptance criteria

a test ensures that if logged in via password, the users identifier is the user.email
ensure (and test!) the described oidc flows work

External or internal Dependencies

## Description I want to make sure, that password login and oidc login work as expected. additional to the users ID, for authentication we also have an email id or an oidc id, respective of the authentication method used. If a login via OIDC matches an oidc_id - update user.mail, if it differs - should also trigger member.mail change If a login via OIDC doesn't match an oidc_id - if a user with the same user.mail exists, ask for password and set oidc_id for user - if no matching mail exists, create a new user from oidc-details ## Acceptance criteria - [x] a test ensures that if logged in via password, the users identifier is the user.email - [x] ensure (and test!) the described oidc flows work ## External or internal Dependencies