google app engine - Getting an authoritative user id / email in GAE federated login -
when performing authentication using openid federated login on gae, user object has following properties:
nickname: http://wordfaire.com/openid?id=103539105724544727060 email: sudhir.j@wordfaire.com
from docs,
email()
returns email address of user. if use openid, should not rely on email address correct. applications should use nickname displayable names.
obviously, advice isn't working out well. how can authoritative email handle associate particular openid provided google apps or other domain? need email id because things invitations , sharing / access control function via email ids.
if need valid email openid users, ask user supply 1 first time log in, , store along user object.
since can create openid provider, it's not safe assume provider has gathered valid address.
Comments
Post a Comment