merge gerrit user request

Barak Korren bkorren at redhat.com
Sun Jan 3 17:06:02 UTC 2016


On 3 January 2016 at 18:59, Nir Soffer <nsoffer at redhat.com> wrote:
> I had same issue few month ago. We should fix this the configuration
> so logging in via multiple oauth2 providers will not create multiple
> accounts.
>
And how would you know that two different oAuth2 identities are the
same person? Without thinking too deeply about this it seems to me any
heuristic you will choose will be fragile and allow for easy identity
theft...



More information about the Infra mailing list