Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Email from facebook cannot be considered verified #69

Open
madjar opened this issue May 19, 2012 · 2 comments
Open

Email from facebook cannot be considered verified #69

madjar opened this issue May 19, 2012 · 2 comments

Comments

@madjar
Copy link

madjar commented May 19, 2012

As of now, velruse consider the email from facebook verified if the the verified boolean in the payload is true (

'verifiedEmail': data.get('email') if data.get('verified') else False,
)

According to the facebook documentation, verified is true if the user verified is email OR his phone number OR gave a valid credit card.

Thus, the email given by the facebook api can't be considered verified.

Source, and some security concerns associated to this : http://stackoverflow.com/questions/10651900/potential-security-issue-with-facebook-login.

@johanneswilm
Copy link

Hey,
have you guys actually tried this out? I have tried to add some email addresses to me Facbook account, and they don't show up in my account unless I ave clicked on the verification link that Facebook sends me. This is how it has been for all the time I can remember.
I also now tried to sign up for an account without verifying my email address. It is possible to sign up, but it is not possible to run any Facebook Applications until the email has been verified. It is not possible to add a phone number unless one has verified the email address. Maybe this was different in May, but that is the way it is now.

@faizanaziz
Copy link

Hey,
So according to what @johanneswilm is saying we dont need to bother. If there is an email it has to be verified. Is there anyway to be sure of this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants