appwrite icon indicating copy to clipboard operation
appwrite copied to clipboard

🐛 Bug Report: OAuth2 implementation does not enforce email retrieval

Open ddenev opened this issue 3 years ago • 1 comments

👟 Reproduction steps

Currently, when the user is presented with the Facebook oauth screen, the user can select 'Edit access" and then switch off the email. image image This means that, after the user disables the email and clicks Continue, a new user will be created in Appwrite but without an email address.

Similar thing is happening with the Yandex OAuth2 adapter - users are created but without email address.

Discord post - https://discord.com/channels/564160730845151244/564175717521424424/1007611652750970900

👍 Expected behavior

Appwrite should extend the OAuth2 adapters to always enforce the retrieval of email address

👎 Actual Behavior

Users are created without an email address

🎲 Appwrite version

Version 0.15.x

💻 Operating system

Windows

🧱 Your Environment

No response

👀 Have you spent some time to check if this issue has been raised before?

  • [X] I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

ddenev avatar Aug 14 '22 07:08 ddenev

I would like to work on this can someone assign to me?

ashutoshpw avatar Sep 09 '22 16:09 ashutoshpw

@ddenev, would it be okay to close this issue as a duplicate of https://github.com/appwrite/appwrite/issues/1192? It would be good if you 👍🏼 that issue as well.

stnguyen90 avatar May 15 '23 22:05 stnguyen90

Hi @stnguyen90

thanks for replying! I would not consider this issue as a duplicate to #1192 - these are two different issues.

At the end, it's your decision whether to merge them, just make sure fixing the other also fixed the 2 problems that are stated here - with Facebook and with Yandex.

Thanks!

ddenev avatar May 21 '23 08:05 ddenev