codenitive / laravel-oneauth

OAuth and OAuth2 Auth bundle for Laravel
http://bundles.laravel.com/bundle/oneauth
MIT License
86 stars 16 forks source link

two facebook accounts accounts linked to same user_id #55

Closed tusharvikky closed 10 years ago

tusharvikky commented 10 years ago

Hello,

I see two different fb account with same user id after the following scenario.

I have two facebook ids with email, fb1@gmail.com and another with fb2@gmail.com.

User is registered with fb1@gmail.com in my app.

STEPS:

  1. User first logs in w/ fb1@gmail.com, since he is registered so user is loggedin.
  2. He logs out of app and fb.
  3. User w/ same browser logs into fb2@gmail.com on fb.
  4. He tries to connect to my app. But he is not registered he must be redirected to registration page but instead he is loggedin with fb1@gmail.com account of my app.

I am using Sentry w/ L3.

Regards

tusharvikky commented 10 years ago

After some work arounds, old Session is saved in oneauth even after starting another callback. Any updates, if user doesn't complete the registration form it should clear oneauth session?

tusharvikky commented 10 years ago

Forgetting session after view make registration.