Comments (6)
@LabN36 Linking should happen regardless of which account you sign up with first. Are you still facing issues with the latest version of the rule? https://github.com/auth0/rules/blob/master/rules/link-users-by-email.md
from rules.
@thameera hey thanks for stopping by I've been waiting for the response since a month(also tried to reach on twitter)
well yes the issue is still there, you can try run the above scenario by yourself or let me know i'll create a snippet for you.
i want someone to involve in this thing because it's driving me crazy.
from rules.
Scenario 2 is the expected behavior of the default rule. Linking should not be done if the email is not verified in one of the accounts; otherwise an attacker can register and link themselves to a legit account.
If you'd like to, for example give an error when the email already exists, you can edit the default rule to do so. Furthermore, you can also redirect the users elsewhere and handle this scenario in your own way.
if you try to change the password after signing up with social provider you will get an error that user does not exist on the auth0 dashboard
I couldn't repro this. How are you trying to change the password? Can you share any screenshots? (w/o sensitive data)
from rules.
in general(most of the websites) when let's say a user firstly signup with facebook he'll get signed in to the website.then user logs out. again if a user want to to login with the same email instead of using facebook.
don't you think a website should show them that wrong password(atleast this is what 99% site does)
i understand that auth0 manages this things in a different way ie. provider wise.
but how can i achieve this behaviour
from rules.
don't you think a website should...
The rules we present here are just guidelines/templates and they should be changed to match the desired behavior. I've seen a lot of customers use the exact same rule, so I guess it's just a matter of preference.
but how can i achieve this behaviour
Sorry, I'm not clear here. Can you clarify what behavior you are trying to achieve and where? (you might have mentioned this earlier but since we seem to be discussing multiple issues here I'm not sure what exactly this is about) If you are looking for custom solution, probably opening a support ticket or posting in the community will be most efficient.
from rules.
Obsolete, Rule no longer exists.
from rules.
Related Issues (20)
- Yubico-MFA doesn't receive OTP code HOT 2
- Linting rules HOT 1
- User properties when changing `context.primaryUser`
- redirect-rules/simple - error: unable to resolve jtn to webtask token HOT 1
- How to write unit tests for Auth0 rules HOT 3
- How to use replyWithError with return reject using nock? HOT 1
- Bug: Highlighted rules links in README are broken
- Can I Require? HOT 3
- Link account w/ metadata merge can cause loss of primary user metadata
- Rules to link accounts by email are case-sensitive HOT 7
- Adding another query param when setting context.redirect.url HOT 1
- "Move user_metadata attributes to profile root attributes" rule title is invalid HOT 1
- Where does the auth0 object come from? HOT 1
- Pull rules from existing repositories HOT 2
- Silent authentication will keep triggering notifications for new users until their session expires
- Context.Authentication possibly undefinded HOT 2
- The Twitter get email address rule does not work with Oauh2 HOT 1
- Cannot get the test coverage report by the solution provided for adding test cases for rule scripts using jest.
- Auth0 rules not trigerring for ZAP on google-auth and discord login
- Rules to link accounts by email are case-sensitive #208
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rules.