<p></p>
<p><b>@milan-cvetkovic</b> commented on this pull request.</p>

<hr>

<p>In <a href="https://github.com/openstreetmap/openstreetmap-website/pull/4455#discussion_r1574339249">app/controllers/users_controller.rb</a>:</p>
<pre style='color:#555'>> @@ -101,14 +107,9 @@ def create
       if current_user.invalid?
         # Something is wrong with a new user, so rerender the form
         render :action => "new"
-      elsif current_user.auth_provider.present?
-        # Verify external authenticator before moving on
-        session[:new_user] = current_user.slice("email", "display_name", "pass_crypt", "pass_crypt_confirmation")
</pre>
<p dir="auto">I believe that user would not be created immediately after <code class="notranslate">/user/new</code>.</p>
<p dir="auto">They would still have to click on "Sign up" on the screen that offers them to confirm their display name. From here, they would have to verify their email as well, unless they also correctly guess the value of <code class="notranslate">verified_email</code> value. Finally, they would probably have to reset their password as well, having no other way to login, and password being set up to a random value.</p>
<p dir="auto">If this is a real concern, I can bring back the extra round trip to the external provider before creating user record.</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br />Reply to this email directly, <a href="https://github.com/openstreetmap/openstreetmap-website/pull/4455#discussion_r1574339249">view it on GitHub</a>, or <a href="https://github.com/notifications/unsubscribe-auth/AAK2OLM2OOYNWTKGADCP2SLY6TCRPAVCNFSM6AAAAABBLOL2OWVHI2DSMVQWIX3LMV43YUDVNRWFEZLROVSXG5CSMV3GSZLXHMZDAMJUGEYDMMJYGU">unsubscribe</a>.<br />You are receiving this because you are subscribed to this thread.<img src="https://github.com/notifications/beacon/AAK2OLJLUVHIKHEZFWFHPHDY6TCRPA5CNFSM6AAAAABBLOL2OWWGG33NNVSW45C7OR4XAZNRKB2WY3CSMVYXKZLTORJGK5TJMV32UY3PNVWWK3TUL5UWJTTYBTJES.gif" height="1" width="1" alt="" /><span style="color: transparent; font-size: 0; display: none; visibility: hidden; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0; mso-hide: all">Message ID: <span><openstreetmap/openstreetmap-website/pull/4455/review/2014106185</span><span>@</span><span>github</span><span>.</span><span>com></span></span></p>
<script type="application/ld+json">[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "https://github.com/openstreetmap/openstreetmap-website/pull/4455#discussion_r1574339249",
"url": "https://github.com/openstreetmap/openstreetmap-website/pull/4455#discussion_r1574339249",
"name": "View Pull Request"
},
"description": "View this Pull Request on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
}
]</script>