3 ms·
This is pretty amazing. Im dealing with this very issue on my app with devise and omniauth. One thingI havent seen asked and answered is what do you do if the
by codenerdz 14y ago
This is pretty amazing. Im dealing with this very issue on my app with devise and omniauth.
One thingI havent seen asked and answered is what do you do if the OAUTH provider does not supply email(which you mentioned is used to determined if the user has already signed in via a different provider).
For example. A user signs in via Facebook and is authenticated(his email and provider uid is stored). He then goes to a different machine/browser and signs in via Twitter which does not provide an email address neccessary to associated with a previous Facebook sign in. What then?
- nostromo 14y agoIn this case, unless they have explicitly connected their Twitter account and their Facebook account to your service while logged in, they will not be logged into their account. It's a hard problem to solve. Some companies are asking Twitter OAuth users to provide their email upon connecting to try and get around it.