let validated 3rd party tokens pass

lib/oauth3.js

@@ -35,11 +35,14 @@ function generateRescope(req, Models, decoded, fullPpid, ppid) {
         console.log('[DEBUG] fullPpid:', fullPpid);
         console.log('[DEBUG] ppid:', ppid);
 
-        throw new Error(
+        if (!req.oauth3.token.sub || !req.oauth3.token.iss) {
-          "TODO: No profile found with that credential. Would you like to create a new profile or link to an existing profile?"
+          throw new Error(
-        );
+            "TODO: No profile found with that credential. Would you like to create a new profile or link to an existing profile?"
-      }
+          );
+        }
 
+        return req.oauth3.token.sub + '@' + req.oauth3.token.iss;
+      }
 
       // XXX BUG XXX need to pass own url in to use as issuer for own tokens
       req.oauth3.accountIdx = result.sub + '@' + (result.iss || decoded.iss);