dwyl / dwyl/auth

Allow Password Creation for Accounts Created with Google/GitHub Auth

Open
#71 4 comments 1 reaction 0 assignees View on GitHub
bug chore enhancement priority-3 T4h technical
Dominant language
Elixir
Stars
141
Forks
8
PR merge metrics
No merged PRs in 30d

Description

If a person login to the application using Google first, no password is saved in the database. If then the same person try to register/login with email/password the application find the existing user by email and will try to compare the hash password, however the current one on the database is `nil` which break the password check:

![image](https://user-images.githubusercontent.com/6057298/70719479-fadd8280-1ce9-11ea-9614-5a7df8b65fc4.png)

We can not update the password when the user login as it will allow anyone to set the password for this user.
My idea is to send an `reset` email to the user when she can will be able to setup the new password via a specific link

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.