OneAll - Thought I was going Mad
Using Jamroom
MAD©:
But as the other post says, to me it should log you in to the account anyway as it is using the same email address.
oneall has already established that you are either logged into facebook with that address or asks you to log into facebook.
Am I missing something?
yeah - this would be a major security issue. Remember that anything your system receives from OneAll can be
spoofed, so you would never want to "auto login" a user based simply on the email address they are giving you. This is why when you actually "connect" your FB account to your JR account, you go through this little screen that tells you what the JR site will have access to, etc. - this is an "OAuth" setup and sets up specific tokens that are used in the exchange - NOT an email address (since email can change).
I can go into a more length explanation as to why we'd never do it that way, but hopefully you get the idea from above as to why it is a bad idea. If we WERE to do it this way, then I could take over any account on a JR system without even using OneAll.
So updating the error makes sense - just needed that clarification.
Hope this helps!