Context: after T283908, already-existing users can auto-link their remote account without haggling with a server administrator. This is really good.
Current situation: after an user connects a remote account, this is what they see from the preferences:
Current missing feature: the user cannot de-link that remote account.
Use cases:
- fix an accidental login from another remote account
- delink an untrusted remote (e.g. Elon Musk bought your platform) - so you rely on local username-password or other remotes if supported
- troubleshoot the platform - showing other people that it works (or not)
- replay the login - for example because you really like T283908
Proposed solution: add a "Disconnect" button, allowing people to disconnect from the remote account.
Things to discuss: allowing to "Disconnect" a remote account may not be liked by everyone since this extension has many uses, sometime relying on only-remote login. So I propose to implement this feature, disable for everyone as default. Kind of:
$wgOAuthAllowDisconnect = false
