Preocupação de Segurança/Privacidade: E-mail exposto na URL de redirecionamento do provedor DiscourseConnect

JACK_ZHANG · Maio 5, 2026, 8:43am

Aqui está o link para o PR

github.com/discourse/discourse

FEAT: Add optional email field to DiscourseConnect Provider response (#38382)

main ← Jackzhang144:add-dc-provider-email-option

已打开 06:48PM - 09 Mar 26 UTC

Jackzhang144

+5 -1

Adds a new site setting `discourse_connect_provider_provides_email` (default: tr…ue) to control whether user email is included in the SSO redirect URL. This maintains backward compatibility while allowing admins to disable email exposure for privacy reasons. See: https://meta.discourse.org/t/security-privacy-concern-email-exposed-in-discourseconnect-provider-redirect-url/397980

Tópico		Respostas	Visualizações
Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso) Integrations sso , configuring , discourseconnect , how-to	45	455584	28 de Janeiro de 2026
Use Discourse as an identity provider (SSO, DiscourseConnect) Integrations sso , discourseconnect , how-to	143	50517	9 de Novembro de 2024
DiscourseConnect / SSO. Force users to provide an email after redirecting from the parent website SSO discourseconnect , email	0	309	13 de Setembro de 2022
Create a DiscourseConnect login link Integrations sso , discourseconnect , how-to	6	6354	25 de Setembro de 2024
Integration into custom auth system where emails are not unique? SSO email	40	1456	6 de Junho de 2024

Preocupação de Segurança/Privacidade: E-mail exposto na URL de redirecionamento do provedor DiscourseConnect

Tópicos relacionados