Twitter OAuth is not providing user's email address

[grzegorznittner]

There is not way of getting email address via Twitter API, see https://dev.twitter.com/discussions/1737 We need to ask user for email address and then validate this email address. It seems to be additional work for us, but I think we should do that. We can even support having more than one email address per user, that way we can integrate user accessing startupbidder via various authentication channels (Google, FB, Twitter etc).

Unfortunatelly this will require creating 2 additonal screens: "Ask for email address" and "Email address confirmation page" (could be integrated with user's profile page).

[johnarleyburns]

I suggest we have a single sign on form with email always included, so it has to be provided with any authentication method. On Jul 17, 2012 9:15 PM, "Grzegorz Nittner" < reply@reply.github.com> wrote:

There is not way of getting email address via Twitter API, see https://dev.twitter.com/discussions/1737 We need to ask user for email address and then validate this email address. It seems to be additional work for us, but I think we should do that. We can even support having more than one email address per user, that way we can integrate user accessing startupbidder via various authentication channels (Google, FB, Twitter etc).

Unfortunatelly this will require creating 2 additonal screens: "Ask for email address" and "Email address confirmation page" (could be integrated with user's profile page).

---

Reply to this email directly or view it on GitHub: https://github.com/grzegorznittner/StartupBidder/issues/285

[grzegorznittner]

That's not possible since we should request email after authorization. It doesn't make sense to ask email for google authorization. Another thing is that only twitter is not providing email address.

On 17 lip 2012, at 21:56, John Burnsreply@reply.github.com wrote:

I suggest we have a single sign on form with email always included, so it has to be provided with any authentication method. On Jul 17, 2012 9:15 PM, "Grzegorz Nittner" < reply@reply.github.com> wrote:

There is not way of getting email address via Twitter API, see https://dev.twitter.com/discussions/1737 We need to ask user for email address and then validate this email address. It seems to be additional work for us, but I think we should do that. We can even support having more than one email address per user, that way we can integrate user accessing startupbidder via various authentication channels (Google, FB, Twitter etc).

Unfortunatelly this will require creating 2 additonal screens: "Ask for email address" and "Email address confirmation page" (could be integrated with user's profile page).

---

Reply to this email directly or view it on GitHub: https://github.com/grzegorznittner/StartupBidder/issues/285

---

Reply to this email directly or view it on GitHub: https://github.com/grzegorznittner/StartupBidder/issues/285#issuecomment-7047417

[grzegorznittner]

We need to verify provided email by sending authorization email. Obviously twitter login won't be the simplest available for of logging into SB but we should have it just for having Twitter brand on our site. In the future we can consider posting twits on user's account.

[grzegorznittner]

Users logged in via Twitter won't get activatated till they verify email address.

I've added 2 additional functions to handle email verfication for Twitter logins: POST /user/request_update_email?email= GET /user/confirm_update_email?id=&token=

User will get link to the second method via email (that's the only part not implemented yet). In case there is existing account associated with that email Twitter user will be automatically associated with it.

[johnarleyburns]

Consider this as email token login stuff for later.