SECURITY: Ensure oAuth authenticated email is the same as created user's email.

This commit is contained in:
Guo Xiang Tan
2017-02-24 13:13:10 +08:00
parent 0847b4258a
commit 1060239e2d
3 changed files with 42 additions and 1 deletions

View File

@@ -21,7 +21,10 @@ class UserAuthenticator
end
def finish
authenticator.after_create_account(@user, @session) if authenticator
if authenticator && authenticated?
authenticator.after_create_account(@user, @session)
end
@session = nil
end