#check if the user exists before logging in with oath2
15 messages · Page 1 of 1 (latest)
Why? It's typically not a good idea to have something like that because then bad actors can check if accounts exist on your app
i am using googleAuth and when a user registers i ask there role but when they loggin with google without ever having an account google appwrite creates an account for them without role
Get the role after
i want to check if the user exists before logging them in
It's typically not a good idea to have something like that because then bad actors can check if accounts exist on your app
but i have to check if the user exists before logging them i have an oath google and on sign in page when they click google instead of checking if the user exists it automatically creates an account for them what i want it check if the user exists and log them in if the user doesn't exist don't create account just notify they don't have accont
In that case, you should go to the Appwrite console > Auth > Security and set the user limit to something low like 1
This will prevent accounts from being created
but how do i check if the user exists?
If you expose a way to check if a user exists, I can use that and throw at it a list of emails and your method will tell me if that email has been registered in your app or not. THIS IS BAD
so what is the solution?
Did you not read this?
okay but there is a registration page where users can register with credentials or with google oath is it going to affect that
Would you please explain more about your requirements?