Topic-icon Wrong user mapping with JFBConnect

Active Subscriptions:

None
13 years 9 months ago #26357 by sougatab
This has happened a couple of times and we were not able to understand what's wrong. This is what happens:
User A has logged in via Jomsocial's user ID and password. This user may or may not be using JFBConnect.
User B has given the FB app access to profile data in the past.
In the same browser 2 tabs are open. User A's Jomsocial and User B's Facebook.
Suddenly, there is a message that User A's account has been successfully connected with Facebook. This also replaces User A's profile avatar and info with that of User B.
This is a very serious issue. It has happened with us a few times.
How can we prevent this? One of our user accounts has got wrongly linked with another FB account. How can we restore the original user mapping?
The topic has been locked.
Support Specialist
13 years 9 months ago #26361 by alzander
That can happen a few different ways. It's not common, and it usually only happens under development / testing environments because in that mode, you'll be switching between accounts, tabs, and Facebook sessions. There's not a bug in JFBConnect, it's just a matter of how you use each of the tabs that can cause an account to get re-linked.

Basically, when user A) logs in, but is logged into Facebook with a different account than they have connected to your site (or no account mapping at all), the SCLogin module will have a link that says "Connect this account?" If you click that while logged in, it will update the current user's mapping to the new Facebook account, replacing the old mapping. You can disable the "Connect this account?" button in the SCLogin module for "Allow Reconnections".

Additionally, if you are switching emails for the Joomla user that is logged in, when the next Facebook login with the same email address, the Joomla account with the same email address will be remapped to the Facebook account.

So, in short, there are a few uncommon ways that accounts can be mixed up. It's almost always a case of it happening in test environments, and it's always from an unintentional click or change in user settings. There's no reason JFBConnect will remap a user without some intention of it happening. If you notice a case where it does happen unexpectedly, let us know what happened on that page load.

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
13 years 8 months ago #26424 by sougatab
Thanks Alex.
In the SC Module (under Logout View settings), there is an option that says:
Show Connect Account Button(s)

Should I hide this option?
I don't see any option called ""Allow Reconnections".
The topic has been locked.
Support Specialist
13 years 8 months ago #26432 by alzander
Yes, that's the correct name. The Allow Reconnections option was the old (more confusing) name for that option :)
The topic has been locked.