Page MenuHomePhabricator
Create Task
Maniphest T2549

Support linking multiple external accounts from the same provider with one Phabricator account
Closed, WontfixPublic
Actions

Description

When I originally set up my http://secure.phabricator.com account, I connected with my Locu Google Apps account. This was a mistake; I should have used my personal Gmail account.

Just now I accidentally logged in on my home computer with my personal account, creating "mierle" (instead of my preferred account name of "keir"), not realizing until after I had created the account that it was the wrong one.

I have two questions:

  1. Is it possible to delete the "mierle" account (there are no actions associated with it)
  2. Is it possible to add another connected Google account to "keir"?

Related Objects
Search...

StatusAssignedTask
 WontfixepriestleyT2549 Support linking multiple external accounts from the same provider with one Phabricator account
Restricted Maniphest Task
Restricted Maniphest Task
Restricted Maniphest Task
Restricted Maniphest Task
 ResolvedNoneT6707 'Attaching' two external accounts of the same type results in AphrontCountQueryException

Event Timeline

keir added a project: OAuthServer.Feb 15 2013, 6:23 AM
keir added a subscriber: keir.
epriestley added a comment.Feb 15 2013, 2:42 PM
  • I deleted the @mierle account.
  • It's currently not possible to link a Phabricator account to more than one external account of a given type (where "type" is one of "Facebook", "Google", "GitHub", etc.). In hindsight this was an architectural mistake, but I didn't think about it at the time and left us with a mess to clean up. It will be resolved by {T1536}, which is a sort of umbrella task for remedying various missteps on the auth pathway. We've made some progress on that, but it will be at least a little while before it lands.
epriestley added a subscriber: epriestley.Feb 15 2013, 2:42 PM
epriestley triaged this task as Normal priority.Feb 15 2013, 2:59 PM
epriestley edited this Maniphest Task.Feb 15 2013, 2:59 PM
indygreg added a subscriber: indygreg.Oct 14 2013, 11:03 PM

This applies to the Persona provider (T3958) as well.

epriestley renamed this task from Support linking multiple Google IDs with one account to Support linking multiple external accounts from the same provider with one Phabricator account.Oct 14 2013, 11:04 PM
epriestley mentioned this in T6703: Allow multiple copies of the same auth provider type.Dec 6 2014, 3:49 PM
qgil added a subscriber: qgil.Dec 6 2014, 7:56 PM
epriestley mentioned this in T6707: 'Attaching' two external accounts of the same type results in AphrontCountQueryException.Dec 8 2014, 11:39 AM
Krenair added a subscriber: Krenair.Dec 8 2014, 8:43 PM
calfzhou added a subscriber: calfzhou.Dec 26 2014, 3:21 AM

Now i linked two Google accounts with my phabricator account, is there any way to remove one of them?

pasted_file (371×854 px, 70 KB)

Refresh or delete any of them will lead AphrontCountQueryException:

pasted_file (103×425 px, 13 KB)

calfzhou added a comment.EditedDec 26 2014, 3:46 AM

Can i directly delete the related row in phabricator_user.user_externalaccount table from my database?

Update: I deleted it by editing database directly :P

devurandom added a subscriber: devurandom.Mar 31 2015, 2:04 PM
epriestley mentioned this in T7732: Convoluted flow when locked out of account with only one auth provider.Apr 2 2015, 12:09 PM
eadler added a subscriber: eadler.Apr 28 2015, 3:27 AM
swsnider added a subscriber: swsnider.Jul 6 2015, 1:14 AM
chad changed the visibility from "All Users" to "Public (No Login Required)".Jul 23 2015, 4:41 AM
epriestley closed subtask T6707: 'Attaching' two external accounts of the same type results in AphrontCountQueryException as Resolved.Oct 24 2015, 11:50 AM
epriestley mentioned this in T10452: Provide more flexible management over disabling/changing ldap user accounts.Feb 25 2016, 9:14 PM
cburroughs added a subscriber: cburroughs.Feb 25 2016, 9:30 PM
cburroughs added projects: Auth, LDAP.Feb 25 2016, 9:35 PM
eadler added a project: Restricted Project.Apr 7 2016, 6:11 PM
eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
cburroughs added a project: Restricted Project.Apr 20 2016, 3:40 PM
cburroughs moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Apr 20 2016, 3:56 PM
urzds added a subscriber: urzds.May 17 2016, 6:39 PM
eadler moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Jul 4 2016, 9:19 PM
• cgdd0039 added a subscriber: • cgdd0039.Aug 22 2016, 8:07 AM
In T2549#25878, @epriestley wrote:
  • I deleted the @mierle account.
  • It's currently not possible to link a Phabricator account to more than one external account of a given type (where "type" is one of "Facebook", "Google", "GitHub", etc.). In hindsight this was an architectural mistake, but I didn't think about it at the time and left us with a mess to clean up. It will be resolved by {T1536}, which is a sort of umbrella task for remedying various missteps on the auth pathway. We've made some progress on that, but it will be at least a little while before it lands.
epriestley mentioned this in T12288: Phabricator OAuth 2.0 initiating SSO login from a Third Party website.Mar 1 2017, 3:11 PM
• pasik added a subscriber: • pasik.Mar 1 2017, 3:15 PM
epriestley closed this task as Wontfix.EditedDec 12 2018, 7:53 PM
epriestley claimed this task.

There are two flavors of this:

  1. Linking one Phabricator account with multiple accounts of the same type on a single remote service (e.g., linking to several different GitHub accounts).
  2. Linking one Phabricator account with multiple accounts of the same type on different remote services, one per service (e.g., linking to different LDAP accounts on different LDAP servers).

T6703 covers (2).

Although we probably should permit (1), I think the use cases for it are much weaker. In almost all cases, this arises because you want to link account B and accidentally linked account A instead. In these cases, you can unlink account A and link account B. If you somehow lose your session between unlinking and re-linking, you can use an email link to regain access to your account, or an administrator can bin/auth recover it for you.

I think the use case here is probably already covered, and it sounds like (1) wouldn't really have helped in the case of T10452.

I think the work to make this function probably isn't worthwhile in the absence of a strong use case, and I don't think I've seen one. The use cases in T6703 are sufficiently reasonable and the architecture there is clearly wrong as motivations for (2), but I think (1) is on far shaker ground and don't expect to pursue it until more motivation arises.

urzds added a comment.EditedDec 13 2018, 11:20 AM

I believe that instead of T7667 you meant to write T6703.

epriestley added a comment.Dec 13 2018, 12:48 PM

Sorry, yeah, I meant T6703.

epriestley mentioned this in T13493: JIRA API has changed identifiers from "key" to "accountId".Feb 22 2020, 8:54 PM
Phabricator · Built by Phacility