redelivre/login-cidadao

3rd Party Login: ask email when missing

Closed this issue · 2 comments

It seems that Facebook is allowing our users to connect without giving us their email, which is awesome on the privacy side of things, but we have to handle that on our side to ask the user for his or her email.

Note that Twitter never sends the user's email so it might be a good starting point to implement the same behavior on other 3rd Party Login providers or to refactor Twitter's.

Knowing facebook profile or twitter isn't enough?

Email is required, otherwise the user can't recover the account or even login if access to the 3rd party service is lost.