Strategy for managing multi-authentication about hackathon-starter HOT 3 CLOSED

Hey @sahat with Drywall we're not doing any account merging if a user creates multiple accounts, that sounds like complicated business. However, in our Account > Settings area we do let people link their social accounts to their existing account.

from hackathon-starter.

IMO the first email ought to take priority, e.g., it is not overwritten by the local strategy.

In your example above, the user will receive a flash saying they already made an account. Instead of displaying [email protected], it'll output [email protected] on profile.jade.

This will take some logic to detect the edge case, but I think it's the best solution. It's also more predictable IMO since it preserves the earliest email account ([email protected]).

from hackathon-starter.

@jedireza Thanks Reza. That's what I ended up doing it as well. After hours of trying to get the merging process right, it sometimes wouldn't save OAuth provider Id for whatever reason. And then there are issues with which account gets what. Instead I went with a simpler approach - to display a notification saying "Either sign in through that account, or delete it and link it with this current account in the account management page".

from hackathon-starter.