search

supertokens / supertokens-core

Open source alternative to Auth0 / Firebase Auth / AWS Cognito
https://supertokens.com
Other
13.16k stars 522 forks source link

Enhancements to third party login #182

Open rishabhpoddar opened 3 years ago

rishabhpoddar commented 3 years ago

(These will be done after release of thirdparty and thirdparty + emailpassword login)

kant01ne commented 3 years ago

one thing is that if you sign up with OAuth, but then forget that you did, but you know which address you used, and go to forgot password flow, you will not receive any emails. a good idea would be to send an email saying “there is no email/password but we found a Google account linked to this email address”

rishabhpoddar commented 3 years ago

If a user has already signed up previously with email X, and uses another method to sign in with the same email, we will remind them that they had an account already and to use that other method. Or they can continue and create a new account.

This would more or less solve the issue of users creating a new account by mistake, whilst maintaining app security.