I am using Cognito in my service and I want to enable my service to change email address.
In my frontend, I added code like this.
const email = 'foo#example.com'; // input
const user = await Auth.currentAuthenticatedUser();
await Auth.updateUserAttributes(user, { email });
I found this updateUserAttributes not only send verification email, but also change email address and set Email verified false before verification success.
When a user send wrong email address, I think, the user will no longer login, because the user cannot access to verification code and login old email.
Is there functions like rollback old email address in Cognito?
After some digging, I found the related issue
I found this updateUserAttributes not only send verification email, but also change email address and set Email verified false before verification success.
Unfortunately, this is Cognito side problem, and now there is no way to solve it fundamentally.
In the issue, Can-Sahin approach may help you.
we are developing an Application to do single signon with LinkedIn. In our app we have requested r_basicProfile and r_emailaddress permissions in scope. But once the user is authenticated while retreiving the email address, we are able to get the primary email address alone.
is there a way we could get all the email address the user has added to his profile?
I have an Auth0 rule set up that tries to send a user's email
function(user, context, callback) {
const email = user.email;
// Send e-mail to API server
callback(null, user, context);
}
This code works for basic login and some Facebook accounts, but not all; I have the e-mail scope set up in both the Auth0 connection configuration and the e-mail permission allowed by the Facebook app settings.
When a user sets up an account for an application and uses their email address for a username, how do I verify that the email address they entered is a valid email? Specifically, without sending a verification email.
Valid e-mail address eq php filter_var('root#stackoverflow.com', FILTER_VALIDATE_EMAIL);
when user finish retyping e-mail onfocus send ajax request
DNS query for e-mail svr eq search in google for source script "valid email by dns github"
For some users in our application, the email field returns NULL even if the user has granted the email access to the app.
When we check the scope parameter and the validity of the user Token thanks to the Debugger tool, everything is ok. The permission email has been accepted.
But when we ask the Graph API for the email of the user with the valid user token, it does not appear at all.
Is there a way a user could prevent an app from getting his email even if he granted the email permission?
Thanks
I had the same problem and I think I found out why:
If the user has an unconfirmed email in Facebook (i.e. Facebook sent him a validation mail to the user's email address but he didn't respond) Facebook WILL NOT pass that email to your app even if he gave you the email permissions.
So what I did is use his or her Facebook email if the user has a user name (i.e. userName#facebook.com).
I have the same issue. It is working fine on my localhost, i am using php SDK for facebook login and when i submit my request it's return all the fields like email,name etc of the user but on server somehow it is not working.It will not returns user email.
I have done lots of R&D on that and i have the solution for the issue. :)
$profile = $facebook->api('/me?fields=email,first_name,last_name');
if you are using php-sdk just passes fields like this it returns the email,first_name etc.
Hopes it works for you all.
thanks.
All you need to know:
1) Link 1
Some possible reasons:
No Email address on account
No confirmed email address on account
No verified email address on account
User entered a security checkpoint which required them to reconfirm their email address and they have not yet done so
Users's email address is unreachable
You also need the 'email' extended permission, even for users who have
a valid, confirmed, reachable email address on file.
2) Link 2
Note, even if you request the email permission it is not guaranteed
you will get an email address. For example, if someone signed up for
Facebook with a phone number instead of an email address, the email
field may be empty.
Facebook does not send the email if the user has logged in with their phone number.
View the comments on https://github.com/mkdynamic/omniauth-facebook/issues/61 for more info.
You must give email permission along with the auth button.
authButton.setReadPermissions(Arrays.asList("email"));
In some cases Facebook may not have a valid email address for a user:
email: string containing a valid RFC822 email address - note: this
field may be null if no email address is available for the user
see https://developers.facebook.com/docs/reference/api/user/
#ozba solution is not applicable because facebook now shows an alert message when user has an unconfirmed email address. So, if you're having this problem it's more liking that the user had signed up using phone number.
Some possible reasons:
No Email address on account (only phone number)
No confirmed email address on account
User entered a security checkpoint which required them to reconfirm their email address and they have not yet done so users's email address is unreachable.
Check: https://developers.facebook.com/bugs/298946933534016
According to the documentation:
Note, even if you request the email permission it is not guaranteed you will get an email address. For example, if someone signed up for Facebook with a phone number instead of an email address, the email field may be empty.
That would explain why some users have a null email!
Facebook will provide you a user's email id if and only that user has a confirmed email id associated with his account. If your app can retrieve email id for some users, problem may not with the Developer.
I have read previous responses but though some of them true like if the user has not email confirmed but a mobile phone number, many times this error happens for ignoring how to request the information using FB api graph. Let's say your login was successfully done, and you now have an access token and user id an so on but still, cannot see email and other fields you are interested in. Go ahead using this request after confirming login status as connected:
FB.api(
'/me',
'GET',
{"fields":"id,name,birthday,email,about,cover"},
function(response) {
// Insert your code here
}
);
depends on permissions you requested you now will be able to catch further information according to your needs.
you can try this it will work
String email = user.getProperty("email").toString();
String safeEmail = user.asMap().get("email").toString();
You need one more permission from facebook.
include (about_me) permission to the facebook dev setting and also in your app or code..
Just you need to add more permissions to whatever data you want from Facebook object about your user.
Facebook API
$loginUrl = $facebook->getLoginUrl(
array(
'req_perms' => 'email'
)
);