Enhancements to third party login

[rishabhpoddar]

(These will be done after release of thirdparty and thirdparty + emailpassword login)

• Third party login brainstorming #154 (comment)
• Third party login brainstorming #154 (comment)
• Handle OAuth 1.0 since some providers like Twitter use it.
• Enhancements to third party login #182 (comment)
• Enhancements to third party login #182 (comment)

[kant01ne]

one thing is that if you sign up with OAuth, but then forget that you did, but you know which address you used, and go to forgot password flow, you will not receive any emails. a good idea would be to send an email saying “there is no email/password but we found a Google account linked to this email address”

[rishabhpoddar]

If a user has already signed up previously with email X, and uses another method to sign in with the same email, we will remind them that they had an account already and to use that other method. Or they can continue and create a new account.

This would more or less solve the issue of users creating a new account by mistake, whilst maintaining app security.