Users who register through GitHub cannot bind their email

[MomentQYC]

Description

When a user signs up through GitHub, the user cannot bind their email address and cannot back up the encryption keys.
It shows

But if you are a registered user via email, it's perfectly normal to do all this.

Steps to reproduce

• Register via Github
• Bind a email address or backup the encryption keys

Homeserver

hashi.sbs

Synapse Version

Synapse 1.70.1

Installation Method

Debian packages from packages.matrix.org

Platform

Ubuntu 20.04.5
Python 3.8

Relevant log output

No log

Anything else that would be useful to know?

Related config file snippets

enable_registration_without_verification: false
registrations_require_3pid:
  - email

oidc_providers:
  - idp_id: github
    idp_name: Github
    idp_brand: "github"  # optional: styling hint for clients
    discover: false
    issuer: "https://github.com/"
    client_id: "***" # TO BE FILLED
    client_secret: "***" # TO BE FILLED
    authorization_endpoint: "https://github.com/login/oauth/authorize"
    token_endpoint: "https://github.com/login/oauth/access_token"
    userinfo_endpoint: "https://api.github.com/user"
    scopes: ["read:user"]
    user_mapping_provider:
      config:
        subject_claim: "id"
        localpart_template: "{{ user.login }}"
        display_name_template: "{{ user.name }}"
    
enable_3pid_changes: true

Re-login did not solve the problem.

[MomentQYC]

This seems to be a logic issue. The user is logged in on the app, yet opens the link in the browser (not logged in) and then verifies through GitHub, but since the browser is not actually logged in, there is this problem?
This is just a guess on my part, I hope it helps.

[DMRobertson]

The user is logged in on the app, yet opens the link in the browser (not logged in) and then verifies through GitHub, but since the browser is not actually logged in, there is this problem?

This seems to match the text of the warning message itself:

make sure you [...] open the validation link in the same client you're logging in from.

Which client are you using?

[MomentQYC]

The user is logged in on the app, yet opens the link in the browser (not logged in) and then verifies through GitHub, but since the browser is not actually logged in, there is this problem?

This seems to match the text of the warning message itself:

make sure you [...] open the validation link in the same client you're logging in from.

Which client are you using?

Element Desktop 1.11.12(Windows 11)