inveniosoftware / invenio-oauthclient

Invenio module that provides OAuth web authorization support.
https://invenio-oauthclient.readthedocs.io
MIT License
6 stars 76 forks source link

Allow disabling of "disconnect" button for linked accounts #251

Closed max-moser closed 3 years ago

max-moser commented 3 years ago

Is your feature request related to a problem? Please describe.

The PR https://github.com/inveniosoftware/invenio-accounts/pull/368 allows disabling of logging in using "local" accounts, leaving only external authentication services as means for authentication. If every linked account would be disconnected, it might be possible to create a situation where there's no easy way of logging into that account anymore (would probably involve changing the registered e-mail address of the user and disconnecting all linked accounts).

Describe the solution you'd like

There should be some way to prevent the users from accidentally locking themselves out of the account that easily. Probably this would include disabling the "disconnect" button for the last linked external account in case that local logins are disabled, although the precise conditions still have to be discussed.