Not all openid/oauth providers give you the email, which can be considered a globally unique user friendly identifier. So if we set "validate_email_field", authlogic-connect should bring up a "confirm email" screen that prompts them to type in their email. We need to temporarily create a user though, in the database, so we could use a state machine ("confirmed", "active", etc.), or just a simple boolean ("confirmed"). Probably identify by the persistence_token, is that acceptable (so in confirmation form, it would store persistence_token in a hidden field)?
This would be great. I know facebook doesn't, not sure about the others that don't? I know that Yahoo & Google both give the email from OpenID but not sure about Oauth...
Not all openid/oauth providers give you the email, which can be considered a globally unique user friendly identifier. So if we set "validate_email_field", authlogic-connect should bring up a "confirm email" screen that prompts them to type in their email. We need to temporarily create a user though, in the database, so we could use a state machine ("confirmed", "active", etc.), or just a simple boolean ("confirmed"). Probably identify by the
persistence_token
, is that acceptable (so in confirmation form, it would storepersistence_token
in a hidden field)?