solved OneAll - Thought I was going Mad

We went live today and decided to activate the OneAll Module Properly.
Set up Facebook exactly as described on OneAll ( New FB Design )
Set up Module with keys etc and allowed profiles through quota config.

If you were a new user to our JR site it logged you in and took you to your profile page.
( *Which I thought it was meant to ask to add a password ? )
Anyway they were in and they had a profile.
Problem is ANY existing account holder logging into the site with the same email as at facebook,
got the old
"Your account is pending validation - please check your email for the activation link."

I read every thread here about oneall and it seems like people fixed theirs so I tried everything.

Then I came here to Jamroom to test and it is exactly the same
( See image below from here trying to log in from facebook with a JR account using the same email address )
So anyone know why its happening?



--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

updated by @madc: 04/16/14 01:44:35AM

We actually get quote a lot of FB signups here on Jamroom.net, so I think things are working.

However - if the email address already exists in JR, it;s not going to "auto log" them in (that would be a security issue). They need to enter their email and password to log in if their account already exists.

I will check on the error string and see if that's using an incorrect string.

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

My account for ismadman ( which i tried to log in here with ) is already validated here.
Shouldn't the error message then read something like.
An account already exists here using that email address. Please log on using those credentials"
Or something like that?
No mail gets sent from the pictured message.


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

Yeah that's why I mentioned I would check out the error message... I'll be looking at it in the AM.

Thanks!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

OK revisiting this due to a link from another post, and want to be sure I understand the issue here.

Has the "ismadman" account been linked up to Facebook from the Networks section of your user account? If not, you will not be able to log in from Facebook.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

No it hasn't @brian.
Although people not knowing to do that are receiving the above pictured message which makes them think they have to verify the account again and it doesn't send any mail.
Thats why I think on that error it should say
An account already exists here using that email address. Please log on using those credentials
then something like maybe
You need to link your existing account here in the network section to the network you are trying to log in as.

But as the other post says, to me it should log you in to the account anyway as it is using the same email address.
oneall has already established that you are either logged into facebook with that address or asks you to log into facebook.
It won't log you in here unless you are logged into facebook first.

So not understanding the problem. Other sites seem to work if you have an account with them.
They check that you are the owner of the email address first via facebook, twitter etc.

Am I missing something?


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

yeah - this would be a major security issue. Remember that anything your system receives from OneAll can be spoofed, so you would never want to "auto login" a user based simply on the email address they are giving you. This is why when you actually "connect" your FB account to your JR account, you go through this little screen that tells you what the JR site will have access to, etc. - this is an "OAuth" setup and sets up specific tokens that are used in the exchange - NOT an email address (since email can change).

I can go into a more length explanation as to why we'd never do it that way, but hopefully you get the idea from above as to why it is a bad idea. If we WERE to do it this way, then I could take over any account on a JR system without even using OneAll.

So updating the error makes sense - just needed that clarification.

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Ok then the login page needs adjusting so people know what it is.
Sorry, myself and the other poster thought that we could either log in with fb credentials or our sites credentials to gain access to the site.
If you try to log in when you are already a member the error message is confusing as nowhere does it explain that if you already have an account then don't use the fb log in . link it to your network then you can.
Can you see the confusion?
I think onealls log in is pretty idiot proof unless the user is drunk or stupid lol
https://app.oneall.com/signin/
Anyway we have had people asking about exactly what I have said and have since disabled it until we can work out a fool proof explanation on the log in page like OneAll has.

I fully understand now, Just not sure that the error message after someone trying is helping.
As I said, it should be telling them they already have an account and they need to sign in with that and link it through their network tab.
Still not idiot proof but would help instead of "Your account is pending - check your mail " which has nothing to do with it.


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

The "your account is pending" lang string being used there is a bug - that's not the correct message and I will have an update out that uses a new lang string so you can customize it to be as explanatory as you would like.

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Just released version 1.1.8 that should fix up the error message.

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Ok And BTW when you try and log in when you have an account at the site,
it still tells you what the site will have access to, Once you've agreed, It just returns to the screen with pending and also logs you into facebook ( tested )
Try it. You'll see what I mean.


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

WOW your quick


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

This is correct - it's important to understand how it works. If you already have an account on the JR site, then the only way it will work is:

- log in to JR site
- go to "Account Settings" -> "Networks"
- click on the Facebook icon to link up to your existing FB account.

Otherwise if you have not logged in to JR, and you show up with an FB email address that matches an email address in JR, JR is not going to auto log in you in (due to the security issues I already went over).

Let me know if that helps.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Tested and I Love it!
Gives the user a good explanation.
Although ( pedantic ) I still can't understand why you have to log into facebook to verify that you own the email address then to go to your site and have it say you don't. Well not in that way but unless your password has been hacked for your email address , which can happen , you own it.
Anyway , it makes so much more sense now. Shame it actually has to log you into FB before getting that answer though, but I know that is out of JR hands.
Cheers @brian!


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

BTW is there no way to edit the login page?
We'd love to explain it before the users waste their time


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

You can create a custom login page - I believe this document shows the login form to use:

https://www.jamroom.net/the-jamroom-network/documentation/howto/603/howto-add-the-user-login-form-to-any-page

Let me know if that helps.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Thats for adding the login to an existing tpl file
How is the main login page generated. Is it part of the core? ( Thinking about it, it must be )


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion

Yes - it is part of the core, so if you need to change it you need to create your own template version of it.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Ok too much to do so that is on the later list. Thanks @brian!


--
~ https://punkbandpromotions.com ~
Check us out for all your Punk/Alternative Music!
Check us out on Facebook:- https://facebook.com/PunkBandPromotion