MM-40690: Populate the error message with email address (#21491)

When logging via openID, if the user email is invalid,
we don't log the invalid email address. This makes
debugging difficult.

https://mattermost.atlassian.net/browse/MM-40690

```release-note
NONE
```

model/user.go

@@ -318,89 +318,90 @@ func (u *User) DeepCopy() *User {
 // correctly.
 func (u *User) IsValid() *AppError {
 	if !IsValidId(u.Id) {
-		return InvalidUserError("id", "")
+		return InvalidUserError("id", "", u.Id)
 	}
 
 	if u.CreateAt == 0 {
-		return InvalidUserError("create_at", u.Id)
+		return InvalidUserError("create_at", u.Id, u.CreateAt)
 	}
 
 	if u.UpdateAt == 0 {
-		return InvalidUserError("update_at", u.Id)
+		return InvalidUserError("update_at", u.Id, u.UpdateAt)
 	}
 
 	if u.IsRemote() {
 		if !IsValidUsernameAllowRemote(u.Username) {
-			return InvalidUserError("username", u.Id)
+			return InvalidUserError("username", u.Id, u.Username)
 		}
 	} else {
 		if !IsValidUsername(u.Username) {
-			return InvalidUserError("username", u.Id)
+			return InvalidUserError("username", u.Id, u.Username)
 		}
 	}
 
 	if len(u.Email) > UserEmailMaxLength || u.Email == "" || !IsValidEmail(u.Email) {
-		return InvalidUserError("email", u.Id)
+		return InvalidUserError("email", u.Id, u.Email)
 	}
 
 	if utf8.RuneCountInString(u.Nickname) > UserNicknameMaxRunes {
-		return InvalidUserError("nickname", u.Id)
+		return InvalidUserError("nickname", u.Id, u.Nickname)
 	}
 
 	if utf8.RuneCountInString(u.Position) > UserPositionMaxRunes {
-		return InvalidUserError("position", u.Id)
+		return InvalidUserError("position", u.Id, u.Position)
 	}
 
 	if utf8.RuneCountInString(u.FirstName) > UserFirstNameMaxRunes {
-		return InvalidUserError("first_name", u.Id)
+		return InvalidUserError("first_name", u.Id, u.FirstName)
 	}
 
 	if utf8.RuneCountInString(u.LastName) > UserLastNameMaxRunes {
-		return InvalidUserError("last_name", u.Id)
+		return InvalidUserError("last_name", u.Id, u.LastName)
 	}
 
 	if u.AuthData != nil && len(*u.AuthData) > UserAuthDataMaxLength {
-		return InvalidUserError("auth_data", u.Id)
+		return InvalidUserError("auth_data", u.Id, u.AuthData)
 	}
 
 	if u.AuthData != nil && *u.AuthData != "" && u.AuthService == "" {
-		return InvalidUserError("auth_data_type", u.Id)
+		return InvalidUserError("auth_data_type", u.Id, *u.AuthData+" "+u.AuthService)
 	}
 
 	if u.Password != "" && u.AuthData != nil && *u.AuthData != "" {
-		return InvalidUserError("auth_data_pwd", u.Id)
+		return InvalidUserError("auth_data_pwd", u.Id, *u.AuthData)
 	}
 
 	if len(u.Password) > UserPasswordMaxLength {
-		return InvalidUserError("password_limit", u.Id)
+		return InvalidUserError("password_limit", u.Id, "")
 	}
 
 	if !IsValidLocale(u.Locale) {
-		return InvalidUserError("locale", u.Id)
+		return InvalidUserError("locale", u.Id, u.Locale)
 	}
 
 	if len(u.Timezone) > 0 {
 		if tzJSON, err := json.Marshal(u.Timezone); err != nil {
 			return NewAppError("User.IsValid", "model.user.is_valid.marshal.app_error", nil, "", http.StatusInternalServerError).Wrap(err)
 		} else if utf8.RuneCount(tzJSON) > UserTimezoneMaxRunes {
-			return InvalidUserError("timezone_limit", u.Id)
+			return InvalidUserError("timezone_limit", u.Id, u.Timezone)
 		}
 	}
 
 	if len(u.Roles) > UserRolesMaxLength {
 		return NewAppError("User.IsValid", "model.user.is_valid.roles_limit.app_error",
-			map[string]any{"Limit": UserRolesMaxLength}, "user_id="+u.Id, http.StatusBadRequest)
+			map[string]any{"Limit": UserRolesMaxLength}, "user_id="+u.Id+" roles_limit="+u.Roles, http.StatusBadRequest)
 	}
 
 	return nil
 }
 
-func InvalidUserError(fieldName string, userId string) *AppError {
+func InvalidUserError(fieldName, userId string, fieldValue any) *AppError {
 	id := fmt.Sprintf("model.user.is_valid.%s.app_error", fieldName)
 	details := ""
 	if userId != "" {
 		details = "user_id=" + userId
 	}
+	details += fmt.Sprintf(" %s=%v", fieldName, fieldValue)
 	return NewAppError("User.IsValid", id, nil, details, http.StatusBadRequest)
 }