title: Can email address not verified in oauth2?
body: <p>I know not all providers give out user email address, but assuming if they use oauth2 and the email field is not empty, can I say that email address must be verified ?</p>