Login: passwordless users can't use Magic Links to associate social accounts

Expected behavior

As a user with an existing WordPress.com account that uses Magic Links to sign in, I want to associate my social account that shares the same email address and log in that way. The last step to associate an account should not ask me to use a password.

Actual behavior

Magic Link users are sent to the password screen.

Steps to reproduce the behavior

Part I: Create a passwordless WordPress.com account

1. Log out if you are logged in.
2. On the Prologue Screen, tap Sign Up For WordPress.com.
3. On the bottom sheet, tap Sign Up With Email.
4. Enter an email address that is not associated with an WordPress.com account, but that is associated with a Google account.
5. Tap Next.
6. Complete the login flow normally.
7. On the Epilogue Screen, do not enter a password.

Part II: Login with a disconnected passwordless WordPress.com account

1. Log out if you are logged in.
2. On the Prologue Screen, tap Log In.
3. If the Smart Lock dialog appears, dismiss it.
4. On the Email Screen, tap Log in with Google.
5. Pick a Google account that uses the same email address associated with the WordPress.com account created in Part I
6. Notice the Email/Password Screen is shown, even though that account doesn’t have a password set up.

Notes

• To connect/disconnect a Google account, go to the Social Login page.
• Internal references: pbArwn-su-p2 and pbArwn-DK-p2
• Related issue: #6359
• Related FluxC PR: https://github.com/wordpress-mobile/WordPress-FluxC-Android/pull/1603
• Related iOS issue: https://github.com/wordpress-mobile/WordPress-iOS/issues/14331

Tested on Pixel 3XL, Android 10, WPAndroid 15.1

Start by reproducing the flow on Android 10 as described, then inspect the Android login and social-account association flow. Review the related FluxC PR #1603 and issue #6359 for context; done means a passwordless WordPress.com user can associate and use a matching Google account without being sent to the password screen.