Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67556

Oauth2 : "Require email verification" is hardcoded to true for custom issuers.

    XMLWordPrintable

    Details

    • Affected Branches:
      MOODLE_36_STABLE, MOODLE_37_STABLE, MOODLE_38_STABLE, MOODLE_39_STABLE
    • Story Points:
      1

      Description

      Hello,

      The "Require email verification" is unavailable for custom issuers, as the code explicitely enables it only for well-known issuers like Google or Facebook.

      We use our own OIDC provider in our instution, and all services require login through it. In our case, it makes no sense for an user to exist outside this OIDC provider.

      As such, we would like this button to be available in the edition of our issuer.

      In addition, the OIDC specification provides a "email_verified" standard claim, indicating that the provider verified this end user's email. It would be interesting to skip the email verification phase if such a claim is found.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              kévinsztern Kévin Sztern
              Participants:
              Component watchers:
              Andrew Nicols, Jun Pataleta, Michael Hawkins, Shamim Rezaie, Simey Lameze, Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
              Votes:
              8 Vote for this issue
              Watchers:
              11 Start watching this issue

                Dates

                Created:
                Updated: