appwrite
appwrite copied to clipboard
🐛 Bug Report: OAuth2 implementation does not enforce email retrieval
👟 Reproduction steps
Currently, when the user is presented with the Facebook oauth screen, the user can select 'Edit access" and then switch off the email.
This means that, after the user disables the email and clicks Continue, a new user will be created in Appwrite but without an email address.
Similar thing is happening with the Yandex OAuth2 adapter - users are created but without email address.
Discord post - https://discord.com/channels/564160730845151244/564175717521424424/1007611652750970900
👍 Expected behavior
Appwrite should extend the OAuth2 adapters to always enforce the retrieval of email address
👎 Actual Behavior
Users are created without an email address
🎲 Appwrite version
Version 0.15.x
💻 Operating system
Windows
🧱 Your Environment
No response
👀 Have you spent some time to check if this issue has been raised before?
- [X] I checked and didn't find similar issue
🏢 Have you read the Code of Conduct?
- [X] I have read the Code of Conduct
I would like to work on this can someone assign to me?
@ddenev, would it be okay to close this issue as a duplicate of https://github.com/appwrite/appwrite/issues/1192? It would be good if you 👍🏼 that issue as well.
Hi @stnguyen90
thanks for replying! I would not consider this issue as a duplicate to #1192 - these are two different issues.
At the end, it's your decision whether to merge them, just make sure fixing the other also fixed the 2 problems that are stated here - with Facebook and with Yandex.
Thanks!