hard20 pts · first answer countsweb-securityoauthauthentication
Linking accounts by email
Your app auto-links a "Sign in with X" login to an existing account whenever the email matches. The provider lets users set any email without verifying it. What is the risk?
Discussion 0
Join free to post in the discussion.
Related questions
- Storing user passwordsFull Stack Developer
- What HttpOnly doesFull Stack Developer
- What HTTPS protectsFull Stack Developer
- Caching a bank statement pageFull Stack Developer
- Stored versus reflected XSSFull Stack Developer
- Writing location.hash into the pageFull Stack Developer
- Encoding user text inside HTMLFull Stack Developer
- What the Secure cookie flag doesFull Stack Developer