Page MenuHomePhabricator

Prevent duplicate account links from being created by swapping logins and then refreshing the link
ClosedPublic

Authored by epriestley on Oct 23 2015, 8:03 PM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Nov 29, 11:07 PM
Unknown Object (File)
Nov 17 2024, 11:41 PM
Unknown Object (File)
Nov 17 2024, 7:35 PM
Unknown Object (File)
Nov 16 2024, 9:36 PM
Unknown Object (File)
Nov 15 2024, 9:28 AM
Unknown Object (File)
Nov 14 2024, 7:54 AM
Unknown Object (File)
Nov 12 2024, 11:59 PM
Unknown Object (File)
Nov 12 2024, 2:24 PM
Subscribers
None

Details

Summary

Fixes T6707. Users can currently do this:

  • Log in to a service (like Facebook or Google) with account "A".
  • Link their Phabricator account to that account.
  • Log out of Facebook, log back in with account "B".
  • Refresh the account link from SettingsExternal Accounts.

When they do this, we write a second account link (between their Phabricator account and account "B"). However, the rest of the codebase assumes accounts are singly-linked, so this breaks down elsewhere.

For now, decline to link the second account. We'll permit this some day, but need to do more work to allow it, and the need is very rare.

Test Plan
  • Followed the steps above, hit the new error.
  • Logged back in to the proper account and did a link refresh (which worked).

Screen Shot 2015-10-23 at 12.56.20 PM.png (885×890 px, 133 KB)

Diff Detail

Repository
rP Phabricator
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

epriestley retitled this revision from to Prevent duplicate account links from being created by swapping logins and then refreshing the link.
epriestley updated this object.
epriestley edited the test plan for this revision. (Show Details)
epriestley added a reviewer: chad.
chad edited edge metadata.
This revision is now accepted and ready to land.Oct 23 2015, 8:37 PM
This revision was automatically updated to reflect the committed changes.