Consider to also return the AuthInfo from the providers

[akkie]

In the current implementation we do not return the AuthInfo from the providers, instead the providers stores the information after a successful authentication. I think this is a problem if a user uses a relational database with referential integrity to store the data, because the authentication information gets stored before the user will be stored. Maybe we should also return the AuthInfo from the provider and then delegate the storage of the data to the user.

What do you think @fernandoacorreia?

[fernandoacorreia]

I'm still not sure if the OAuth providers' AuthInfo should be persisted at all. I've been focusing mostly on the CredentialsProvider, but in the future I hope to come back to this issue and either come to the same conclusion as you (that it needs to be persisted) or argue that it doesn't.

[akkie]

With the current implementation the user can decide himself if the data should be persisted or not. With the old implementation this wasn't possible.