Creating account before first login

[danieldelcore]

I'm trying to setup a one time payment which grants access to the platform. It can potentially happen before the user logs into the platform.

The way I was thinking to implement this was to:

• Accept payment via a Stripe payment link
• Once the payment is complete a webhook will be triggered which updates or creates a new User with an email + stripe details
• Then a user can log in via an oAuth provider of choice (Github in my case)
• At this point next-auth will create a new Account table and link it to the pre-existing User since it has not already used with any other oAuth provider.

It's well documented that Account linking is not supported by this library for security reasons.

Automatic account linking on sign in is not secure between arbitrary providers - with the exception of allowing users to sign in via an email addresses as a fallback (as they must verify their email address as part of the flow).

But is there some way to allow this securely, in the instance where there is no Account already associated with the User? Or are there better ways to achieve this?