Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-58544

Add option to trust email of an oauth provider

    XMLWordPrintable

    Details

    • Testing Instructions:
      Hide

      Setup Google OAuth (https://docs.moodle.org/dev/OAuth2_Services_Setup_Project_In_Google)

      Add a Google OAuth Service to Moodle
      (https://docs.moodle.org/dev/OAuth2_Services)

      Ensure the "requireconfirmation" checkbox is checked.

      Login with google, using an email that does not exist in moodle (and isn't linked to anyone).

      Verify you see the "email confirmation" screen and are required to click a link in your email to complete the login.

      Delete the linked login and delete the account from Moodle.

      Change the "requireconfirmation" checkbox to unchecked.

      Login with google, using an email that does not exist in moodle (and isn't linked to anyone).

      Verify you are immediately logged into moodle with no email confirmation required.

      Delete the linked login and delete the account from Moodle.

      Manually create an account in moodle with the same email as the google account.

      Ensure the "requireconfirmation" checkbox is checked.

      Login with google, using the account with the email of the manual account.

      Verify you see the "email confirmation" screen and are required to click a link in your email to complete the login.

      Delete the linked login from the account.

      Change the "requireconfirmation" checkbox to unchecked.

      Login with google, using the account with the email of the manual account.

      Verify you are immediately logged into moodle with no email confirmation required.

      Show
      Setup Google OAuth ( https://docs.moodle.org/dev/OAuth2_Services_Setup_Project_In_Google ) Add a Google OAuth Service to Moodle ( https://docs.moodle.org/dev/OAuth2_Services ) Ensure the "requireconfirmation" checkbox is checked. Login with google, using an email that does not exist in moodle (and isn't linked to anyone). Verify you see the "email confirmation" screen and are required to click a link in your email to complete the login. Delete the linked login and delete the account from Moodle. Change the "requireconfirmation" checkbox to unchecked. Login with google, using an email that does not exist in moodle (and isn't linked to anyone). Verify you are immediately logged into moodle with no email confirmation required. Delete the linked login and delete the account from Moodle. Manually create an account in moodle with the same email as the google account. Ensure the "requireconfirmation" checkbox is checked. Login with google, using the account with the email of the manual account. Verify you see the "email confirmation" screen and are required to click a link in your email to complete the login. Delete the linked login from the account. Change the "requireconfirmation" checkbox to unchecked. Login with google, using the account with the email of the manual account. Verify you are immediately logged into moodle with no email confirmation required.
    • Affected Branches:
      MOODLE_33_STABLE
    • Fixed Branches:
      MOODLE_34_STABLE
    • Pull from Repository:
    • Pull Master Branch:
      MDL-58544-master

      Description

      As discussed last week.

      The use case: institution uses Google for their domain, google oauth provider can be considered trusted for that domain. The administrator should have the option to enable

      When an account is created it should be possible for the user to SSO and login and not be sent to check their email for confirmation.

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                6 Vote for this issue
                Watchers:
                11 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Fix Release Date:
                  13/Nov/17