How will this behave if I turn this on on a site that doesn’t currently use external_id? Will it manage to login users based solely on their email?
More generally, since email and external_id are the 2 mandatory fields in the payload, could you clarify how they are used on the discourse side (when receiving the payload from the authenticating site) to figure which user account to login?
- What if no external_id was associated with email during user creation, will it use email and then associate the external_id with this email for future logins?
- What if there is a mismatch between
emailandexternal_id(each is associated with a different discourse account), will it useexternal_idoremailto figure which user to login? Or throw an error?
Thank you!