We are using oauth2 to keep user accounts synced to Fedora accounts. One user has noted that she does not want to interact with Discourse using that same email, for $REASONS. What are the implications of letting users change their address here? Will they still be able to log in the same way? Are the…

They can change their email address in Discourse and then add the oauth2 on their preferences page if they click the “Add alternate Email” link. I just checked and doing a Google auth2 login with my secondary address logs me into this account.

Okay, thanks. We only want the oauth login… does this disrupt that in any way?

I’m not really sure. If they try to log in with oauth after they’ve changed their email and before they’ve added it as secondary then it’ll try to create a new account, I think.

Right. I think that You can add the second address and then switch which is primary. You’ll have to try it. It looks like it should work.

Wait, sorry, I don’t think that answers my question. I guess I wasn’t clear. Right now, we have email editable turned off. This keeps the primary address fixed — and prevents the addition of a secondary one. It sounds like changing the primary address would cause problems (“it’ll try to create a new…

[image] mattdm: One user has noted that she does not want to interact with Discourse using that same email, for $REASONS. Either you want to let the user edit their address or you don’t. The primary address is the one that Discourse sends email to.

Sorry, let me rephrase the initial part. She doesn’t mind the mail coming from discourse to be directed to that inbox. However, her mail client is not configured to send mail from that address. It’s my understanding that if her usual address were added as a secondary, Discourse would understand to p…

[image] mattdm: Does that make sense? Yeah secondary email should work here, I am not sure though of the implications here. You may not want to fiddle with the primary emails. Maybe give it a shot and see what happens?

[image] sam: Yeah secondary email should work here, I am not sure though of the implications here. You may not want to fiddle with the primary emails. Maybe give it a shot and see what happens? Thanks! Is there a way to let users add secondary email addresses without allowing alteration of th…

What are the implications of letting oauth2 users change their email addresses?

Product Support

mattdm (Matthew Miller) November 17, 2020, 8:58pm 5

Oh, that would be bad! Is there, perhaps, a way to allow the addition of a secondary email address while making the primary one fixed?

Topic		Replies	Views
Two emails for one user Feature	48	15820	June 20, 2017
Secondary Emails with SSO SSO	7	2356	October 8, 2024
What is the purpose of a secondary email address Product Support email	6	1790	October 8, 2023
Change email doesn't work for an OAuth'ed account Product Support	7	1290	May 3, 2017
Can an admin change his email address? Product Support	9	891	January 28, 2022

What are the implications of letting oauth2 users change their email addresses?

Related topics