Conditional email account linking

[tanguyMichardiere]

Goals

1. Enable email account linking dynamically based on the OAuth response

Non-Goals

No response

Background

Some providers allow an OAuth connection with an unverified email address, including information about this in the profile. It would be useful to be able to enable email account linking dynamically based on this information.

Proposal

Example API:

NextAuth({
  providers: [
    Discord({
      allowDangerousEmailAccountLinking(profile) {
        return profile.verified;
      },
    }),
    Google({
      allowDangerousEmailAccountLinking(profile) {
        return profile.emailVerified;
      },
    }),
  ],
});