If a user without an ohmage account follows an ohmlet join link and changes their email address before linking their Google account, the ohmlet invitation ends up being orphaned. This occurs because UserController.createAccount() does not accept a user_invitation_id, so the server has no way of either (1) denying the request because the user changed their email or (2) copying the ohmlet invitations into the new user so the user can update their role in the ohmlet.
jshslsky
commented
9 years ago
If a user without an ohmage account follows an ohmlet join link and changes their email address before linking their Google account, the ohmlet invitation ends up being orphaned. This occurs because
UserController.createAccount()does not accept auser_invitation_id, so the server has no way of either (1) denying the request because the user changed their email or (2) copying the ohmlet invitations into the new user so the user can update their role in the ohmlet.