mirror of
https://github.com/coollabsio/coolify.git
synced 2026-11-14 00:33:44 -04:00
Before OAuth identities existed, OAuth sign-in matched users by email only. Add a created_before_oauth_identities flag, set for every user at upgrade time, so their first OAuth identity links without a provider email verification claim. The flag is cleared once an identity links. Also trust Microsoft Entra ID user principal names and GitLab confirmed primary emails as verified, and pass the email to hasVerifiedEmail. Add tests using real provider payloads.