Changing Apple bundle ID causes duplicate users

[Magnuti]

Bug report

• I confirm this is a bug with Supabase, not with my own application.
• I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

Changing the Apple bundle ID on an existing Supabase project causes duplicate users for the same Apple sign in.

To Reproduce

Steps to reproduce the behavior, please provide code snippets or a repository:

1. Have an iOS app with a bundle ID
2. Set up Apple as an auth provider in Supabase with the bundle ID under the Authorized Client IDs (iOS, macOS, watchOS, tvOS bundle IDs or service IDs) input field
3. Sign in with Apple without hiding your email (i.e. don't use an @privaterelay.appleid.com email address)
4. Change the bundle ID of the iOS app
5. Add this new bundle ID to the Apple auth provider settings in Supabase (as in step 2)
6. Install the iOS app on the device
7. Sign in with Apple on the new app without hiding your email (as in step 3)

Expected behavior

Supabase should now have 1 user.

Actual behavior

Supabase now have 2 users. One with the raw email, and one with the @privaterelay.appleid.com email.

Screenshots

System information

• Auth version: 2.150.1
• PostgREST version: 11.2.2
• Postgres version: 15.1.0.134
• Region: eu-west-2

Additional context

The user info on the Apple-private email contains my raw email. This does not seem right at all.