search

arckinteractive / elgg_hybridauth

HybridAuth Client for Elgg
10 stars 9 forks source link

Registration doesn't check whether email is already being used? #25

Closed juho-jaakkola closed 7 years ago

juho-jaakkola commented 7 years ago

Apparently email address is not checked from existing accounts before creating a new one.

I'm using the Facebook authentication, and I keep finding duplicate accounts. One created with the registration form and one with Facebook authentication.

Often users do not remember whether they originally registered manually or via facebook, so they try both which results in two separate accounts. The hybridauth plugin should take this into consideration and prevent duplicate accounts.

beck24 commented 7 years ago

I'm 100% positive it already does this, I was working with it in a project as recently as a couple of days ago where this was tested. Are you sure they're identical email addresses?

juho-jaakkola commented 7 years ago

Ok, good to hear that this has been tested recently. I will do some debugging to rule out any other hooks/features that might accidentally bypass the email check.