• caglararli@hotmail.com
  • 05386281520

Using Google/Microsoft login – no email change?

Çağlar Arlı      -    9 Views

Using Google/Microsoft login – no email change?

I am adding to my web app the ability for a user to log in using their Google or Microsoft account. The default way the ASP.NET Identity Library implements this is on the first use, when they get registered, it prompts for their email with it pre-filled to the account email. And then lets them change it.

Is it a security problem if instead I just register them with their account email? Every prompt is a chance for the user to bail out. And if they change the email I then need to send them and email with a link for them to confirm. So quicker/easier if it just registers.