nexthoughts / grails-social-login

Generic code for Social Media Login for any grails application.

Grails-Social-Login

Generic code for Social Media Login for any grails application.

Good application to start your grails project with Social Media login(Facebook, LinkedIn, Google, Twitter) already implmented with domain structure and Spring security. Also twitter bootstrap is installed by default to provide a better UI.

grails-social-login's Issues

Multiple distinct user accounts can be created using single social account.

As per current implementation, a user can create create multiple account using just single social(FB/LinkedIn) account. All he need to do for this is to change his/her primary email in social account. I know about facebook that it allowed user to add any number of email and also allows to mark any one of them as primary.
And in our code this social login code checks existing Social Profile using said email. The solution of this bug is that this code should checks existing social profile using profile id get from Social APi not by email id.
And one more reason to check stored Social profile using profile id instead of email id is that many social sites don't provide user's email id using API like Twitter.