Description:
Users logging in for the 2nd time via OAuth2 receive “email has already been used” error.
I’m using Auth0 to manage users. Users are able to login without trouble the first time. When trying to log in the second time they receive an message that “email has already been used” and are prompted to change their password. This doesn’t make sense as passwords are mostly managed through social accounts (e.g. github, google, etc.)
Server Setup Information
Steps to reproduce:
- User has verified account on other platforms using the Auth0 application
- User tires to log in using the credentials from above via Auth0 universal login experience (classic)
Expected behavior:
User should be logged in with all user metadata sync'd from Auth0 database
Actual behavior:
User is presented with "this email has already been used and has not been verified. Please change your password. Type new password." dialog.
User shows up in user list in rocket.chat users section. Listed as verified. Listed as online.
Server Setup Information:
Version of Rocket.Chat Server: 3.4.2
Operating System: Linux
Deployment Method: SNAP Tracks
Number of Running Instances: 1
DB Replicaset Oplog: ?
NodeJS Version: v12.16.1
MongoDB Version: 3.6.14
Proxy: Caddy
Firewalls involved: No
Client Setup Information
- Desktop App or Browser Version: All apps and browser
- Operating System: All OSes
Additional context
Followed instructions located here:
https://github.com/RocketChat/Rocket.Chat/issues/8492
and here
https://forums.rocket.chat/t/anyone-auth0-sso-experience/2060
Relevant logs:
I20200727-20:06:41.422(0) server.js:204 CustomOAuth ➔ debug Identity response { "email": "carol.XXXX@gmail.com", "family_name": "XXXX", "given_name": "Carol", "locale": "en", "name": "Carol XXXX", "nickname": "carol.XXXX", "picture": "https://lh3.googleusercontent.com/a-/AOh14GiH5VSBWXT3crhSx7qWiu4ogk_y_E4rlp-y6MVCsw", "country": "United States", "clientID": "rfV0x1ICdNbMe5vRBpyPANOm5ycUdDdz", "created_at": "2020-04-21T18:43:33.248Z", "email_verified": true, "identities": [ { "provider": "google-oauth2", "user_id": "110878763390166151103", "connection": "google-oauth2", "isSocial": true } ], "updated_at": "2020-07-27T20:06:40.304Z", "user_id": "google-oauth2|110878763390166151103", "sub": "google-oauth2|110878763390166151103" }
I20200727-20:06:43.133(0) server.js:204 API ➔ debug POST: /api/v1/method.callAnon/login
I20200727-20:06:43.168(0) server.js:204 Meteor ➔ method joinDefaultChannels -> userId: m76CX5yRhqtDC8Yij, arguments: [null] I20200727-20:06:43.302(0) server.js:204 Integrations ➔ Outgoing WebHook.debug Execute Trigger: userCreated I20200727-20:06:43.304(0) server.js:204 Integrations ➔ Outgoing WebHook.debug Got the event arguments for the event: userCreated { event: 'userCreated', user: { _id: 'm76CX5yRhqtDC8Yij', createdAt: 2020-07-27T20:06:43.146Z, services: { auth0: [Object] }, type: 'user', status: 'offline', active: true, name: 'Carol XXXX', emails: [ [Object] ], username: 'carol.XXXX', _updatedAt: 2020-07-27T20:06:43.147Z } }
I20200727-20:06:43.306(0) server.js:204 Integrations ➔ Outgoing WebHook.debug Starting search for triggers for the room: __any I20200727-20:06:43.308(0) server.js:204 Integrations ➔ Outgoing WebHook.debug Found 0 to iterate over and see if the match the event. I20200727-20:06:43.366(0) server.js:204 Meteor ➔ publish null -> userId: null, arguments: []
I20200727-20:06:43.376(0) server.js:204 API ➔ debug POST: /api/v1/method.callAnon/login I20200727-20:06:43.397(0) Failed login detected - Username[unknown] ClientAddress[72.134.165.246] ForwardedFor[72.134.165.246] XRealIp[72.134.165.246] UserAgent[Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36]
I20200727-20:06:43.402(0) server.js:204 API ➔ debug Success { statusCode: 200, body: { message: '{"msg":"result","id":"1","error":{"isClientSafe":true,"error":145546287,"reason":"No matching login attempt found","message":"No matching login attempt found [145546287]","errorType":"Meteor.Error"}}', success: true } }
Description:
Users logging in for the 2nd time via OAuth2 receive “email has already been used” error.
I’m using Auth0 to manage users. Users are able to login without trouble the first time. When trying to log in the second time they receive an message that “email has already been used” and are prompted to change their password. This doesn’t make sense as passwords are mostly managed through social accounts (e.g. github, google, etc.)
Server Setup Information
Steps to reproduce:
Expected behavior:
User should be logged in with all user metadata sync'd from Auth0 database
Actual behavior:
User is presented with "this email has already been used and has not been verified. Please change your password. Type new password." dialog.
User shows up in user list in rocket.chat users section. Listed as verified. Listed as online.
Server Setup Information:
Client Setup Information
Additional context
Followed instructions located here:
https://github.com/RocketChat/Rocket.Chat/issues/8492and here
https://forums.rocket.chat/t/anyone-auth0-sso-experience/2060Relevant logs: