Sergey KozyrenkoandClaude Fable 5 06178bf868 fix(server): link OAuth logins to existing accounts by email; harden email change ...

- authLoginCallback matches users by email alone so an OAuth login links into an
  existing (incl. local) account instead of 500-ing on users_mail_unique
- relink on a create-branch unique-violation race instead of returning 500
- issue the session with the linked account's actual role privileges
- clear the stale OAuth provider link when a user changes their email
- map the email-change unique-violation race to 409 instead of 500
- isUniqueViolation matches Postgres and SQLite case-insensitively
- tests for link/create/blocked/role-inheritance/race, email 409, provider reset
- update auth form test selectors after the form refactor

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-06-13 19:00:26 +07:00

..

auth

repo final state

2026-03-26 06:16:07 +03:00

context

repo final state

2026-03-26 06:16:07 +03:00

docs

feat(webui): replace Change Password with My Profile (email and password updates)

2026-06-05 23:51:36 +05:30

logger

repo final state

2026-03-26 06:16:07 +03:00

models

feat(server): persist OAuth provider and add self-service name change

2026-06-13 02:56:15 +07:00

oauth

repo final state

2026-03-26 06:16:07 +03:00

rdb

repo final state

2026-03-26 06:16:07 +03:00

response

feat(server): persist OAuth provider and add self-service name change

2026-06-13 02:56:15 +07:00

services

fix(server): link OAuth logins to existing accounts by email; harden email change

2026-06-13 19:00:26 +07:00

middleware.go

fix: recover from stale-chunk and DOM-desync SPA crashes

2026-06-11 17:32:34 +07:00

router.go

feat(server): persist OAuth provider and add self-service name change

2026-06-13 02:56:15 +07:00

static_serving_test.go

fix: recover from stale-chunk and DOM-desync SPA crashes

2026-06-11 17:32:34 +07:00