Skip to content

Changing OIDC provider locks out existing accounts #468

@Kakadus

Description

@Kakadus

🐛 Bug Report

Describe the bug

I configured a kanbn server with OIDC authentication. After a while, I needed to change the OIDC provider. Login now fails for all existing accounts, because of https://better-auth.com/docs/reference/errors/account_not_linked. I'd like to have a setting to enable account linking for the configured OIDC provider, accepting the risks that come with it (account (pre-)highjacking).

To Reproduce
Steps to reproduce the behavior:

  1. Start a kanbn docker container with OIDC auth and register an account
  2. Change the OIDC server settings
  3. Recreate the kanbn container
  4. Try to login again with the account.
  5. See that you get shortly redirected to https://example.com/api/auth/error?error=account_not_linked in the browser console.

Expected behavior
The login succeeds, or a account migration UI is shown.

Environment (please complete the following information):

  • latest kanbn docker image

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions