I have a whitelisted Twitter app that can request and receive email address of a twitter account when the owner of the account accepts and logs in through my app.
Now, I plan to connect it to my already available "Sign-up/Login by email" flow seamlessly.
The problem is, logged in Twitter user may not have verified their email account. In that case they can hijack a user on my system who signed-up with that email.
Therefore, I have to be sure that they have verified their email address. Otherwise I have to automatically send a confirmation link to the email address of the just-signed-in twitter user.
Is there any way to detect if the user confirmed their email address on Twitter? If not, what is the general solution to this problem? At least, how do you solve it for yourselves?
I found out that if the user does not verify their email address, Twitter will not return the email address even though it is there. So, if you receive an email address from Twitter, that should mean that the email address of the user is verified.
If anyone finds that this is not correct, please leave your comment or your findings.
Twitter returns a 0 length string in field email if user didn't verify his email.
...
translator_type: 'none',
email:''}
Related
Where are located the email message on AWS, it is in Cognito?
When a user ask to change his email, it calls this function:
Auth.forgotPassword()
But I can't find where to change the email message (the body, the content).
Currently is a custom message that the previous developer did but I can't find where is it
You can customise email verification messages under the Message Templates heading in the Messaging tab of your user pool.(For small changes)
Need fully customise use the following link
https://bobbyhadz.com/blog/aws-cognito-customize-emails
You cant change your email address if the email address is your credential. if you use a username as a credential then you can update the email.
While authenticating our email account using MailKit (VB.net), as below code
clientIMAP.Authenticate("email#address.com", "myPassword")
Is it possible to "hide" my email address and password? This is because I am not the only who who will access the source code,, and I don't really wanna show my account details to the others.
Was thinking on creating an email account just for this project purpose, but still wants to know if there is any other way.
Currently we retrive user's profile by people.get API, and scopes are profile email https://www.googleapis.com/auth/plus.login.
But no matter user sets their home/work address as public, we still can't get address from reponse.
Did I use the wrong API or scopes?
As documented for scopes.
email gives access to "the user's Google account email address."
https://www.googleapis.com/auth/plus.profile.emails.read gives access to "the user's Google account email address, as well as any public, verified email addresses in the user's Google+ profile."
I have a requirement in my app to sign up with Twitter, so for a first time user, the server stores (among other things) email, password, first name and last name.
But the only things I can get from the Twitter/social framework is the profile id, username, first name and last name. Is there any alternative for getting the email address, or will I have to change the signup mode in my server's app?
Unfortunately it seems that we cant get email address from twitter, so I had to change my signup mode by validation through the twitter login and users profile id. If anybody else has found a workaround please do post your solution. I'll mark that as best answer.
I would like to create a feedback form for users to give feedback for the app. Is there access to the users email address from the app? can the app ask for permissions? If I don't have access how can i hyperlink to the users email client for a windows8 app store app?
If you want to open up the users mail client you can do something like this:
await Windows.System.Launcher.LaunchUriAsync(new Uri("mailto:support#email.co.uk?subject=App Feedback"));
That's what I've used for our support link and it opened up the Mail app with the subject set correctly :o)
You can get the user's email address by getting the principal name - this is documented to be typically the address but you cant be sure so use an email validator to check If its actually the email address. If not prompt the user to enter it for you.
var principalName = await Windows.System.UserProfile.UserInformation.GetPrincipalNameAsync();
The best you can do is ask them for their email address or use the Contact Picker. Like John mentioned you may be able to get a valid email address from the display name but do not rely on this to be true as its not an email address field.