At community.letsencrypt.org , one of our users signed up using GitHub. They had an old, dead email address on their GitHub account. After signing up with Discourse, they removed the old, dead email address from GitHub. However, it’s still present in Discourse. When they go to their preferences page …

Awesome, that fixed it! Thanks so much! Feature request: When doing email changes for moderators, it would be nice to include messaging about the dual-confirmation requirement, either in the Web UI when submitting the request, or by sending mail to both old and new addresses in parallel, and includ…

Hey @jsha ! Would it work if you had the user remove the connection between GitHub and Discourse and reconnect it?

No Problem! Let me know if you have any other questions!

Follow-up: Are you proposing to remove the connection at the Discourse end or the GitHub end? If you’re proposing to disconnect it at the Discourse end, where is the UI for that? And will the user be able to still log in once they’ve removed the OAuth connection?

They are a moderator. So are you saying that if I remove the moderator bit, they’ll be able to change email address?

Change email doesn't work for an OAuth'ed account

Product Support

riking (Kane York) May 3, 2017, 9:25pm 6

Is this user a moderator? Staff members must confirm email changes on both the old and new addresses to stop account takeovers.

Topic		Replies	Views
On email address change second confirm fails due to email customization Product Support	19	2211	November 26, 2019
How to change email if access to old email is no longer available? Product Support	19	6946	September 5, 2022
Switching from GitHub auth to OAuth2 SSO oauth2	9	3026	July 29, 2019
What are the implications of letting oauth2 users change their email addresses? Product Support	16	2260	November 18, 2020
Change user's email address via API without confirmation Development rest-api	5	888	August 14, 2020

Change email doesn't work for an OAuth'ed account

Related topics