Temporarily bypass email_verified gate due to COmanage issue

Author: lahirujayathilake

pkg/service/identity_resolver.go

@@ -139,7 +139,10 @@ func (s *Service) linkBySub(ctx context.Context, claims *identity.Claims) (*mode
 		"email", claims.Email,
 		"email_verified", claims.EmailVerified,
 	)
-	if !claims.EmailVerified || claims.Email == "" {
+	// TODO: restore the email_verified gate once the CILogon test issuer +
+	// COmanage LDAP provisioner start returning email_verified=true.
+	// if !claims.EmailVerified || claims.Email == "" {
+	if claims.Email == "" {
 		return nil, identity.ErrEmailNotVerified
 	}
 	user, err := s.users.FindByEmail(ctx, claims.Email)

pkg/service/identity_resolver_integration_test.go

@@ -127,6 +127,8 @@ func TestResolveCaller_EmailFallback_HappyPath_LinksAndActivates(t *testing.T) {
 }
 
 func TestResolveCaller_EmailFallback_RefusesUnverifiedEmail(t *testing.T) {
+	// TODO: re-enable when the email_verified gate is restored in linkBySub.
+	t.Skip("email_verified gate temporarily bypassed pending COmanage fix")
 	database := setupTestDB(t)
 	svc := newTestService(database)
 	seedPendingUserWithEmail(t, database, "pending@example.edu")