So I'm getting the user's email address during login over OAUTH with LinkedIn as per https://developer.linkedin.com/blog/making-it-easier-you-develop-linkedin
However, it doesn't seem that there's any way to ensure this is a "verified" email address as opposed to one that anyone could pretend to claim.
Other providers I've used won't serve up the primary email address for a user if they've not verified, and in fact often won't Auth at all. LinkedIn however seems to.
Does anyone know if this is by design or if there's a workaround?
check out the OAuth v2 they use now, it requires a validated email address.