azure-ad-b2c Successful verification of otp message - azure-ad-b2c

In Azure-ad-b2c I want users to see that the otp has been successfully verified. However, in ad-b2c window there is no such message appearing and I am not able to find a way to populate a custom message like 'OPT verified'.
All I could see is a metadata in case of incorrect OTP i.e. Item Key="UserMessageIfClaimsTransformationStringsAreNotEqual". Is there something similar for a success case. Below is the default screen I can see in case of successful otp verification.
Thanks.

Related

Google Assistant - askForPermission to get user email from google account

When i try to connect google actions through google assistant i need to get user email id from google account to perform some Operations. For this i try to pops up message to get end user permission to get user email id from google account. The below message pops up when user try to access my actions.
“I’ll just need to get your email from Google account. Is that ok?”
If user says "yes" then will get user email id or if user says "no" it will reject.
My query is if user says "Thank you" or "fine" then also getting user email id. is it expected behavior? if any document link available for this please share with me.
Yes, this is expected behaviour.
Getting the user's email or other user details is handled via accountlinking. I assume you are using Google Sign-in due to the dialogs that are used. The dialogs that are shown to your user when doing this are handled by Google.
Google has trained these dialogs quite well to make sure that the users details are only shared when the user agrees to it. If they answer the question with something unrelated, the dialog will reprompt automatically to make sure that user details are only shared if the user really means to do that.
The words "Thank you" and "Fine" are close enough to a Yes answer, so Google picks this up as a agreement to sharing the details.

Azure B2C - Display Control - Send email verification with Mailjet

I am following the sample as well as the document that describes custom email verification with Mailjet. I get the password reset journey to work but cannot figure out why I have 2 sets of UI elements as shown in the pic. The one below seems to be the one configured to use Mailjet because the email is formatted as I specified in Mailjet. The one on top sends with the default MSFT email verification format.
Thanks for your help! :)
You must have an OutputClaim verified.Email in your technical profile that also references your DisplayControl. Remove that output claim and it'll disappear, leaving only the custom email control.

Firebase password reset customization

I need to change the forgot password link in firebase authentication template emails from a URL to a 6 digit verification code only.
The code will be generated on 'forgot password' and emailed to the user, once received the user would need to enter this verification code into the app... and after confirmation, he/she can change their password. How can I achieve this in firebase.
If you check the Customize account management emails and SMS messages documentation you can see that the oobCode is generate and added directly to the URL, and you cannot generate it otherwise.
On this community post a similar problem to yours is suggested and the proposed solution is to generate you own verification mechanism, although it is possible it represents a lot more work on your end than using the pre existing email with url configuration.

FusionAuth: Webhook user.email.verified not triggered when confirmation happend via "Set Password" email

I've observed in the admin panel that a user's e-mail state changes from Email has not been verified. to Email has been verified. in both cases, either if a verification e-mail was confirmed by the user or if the user followed an e-mail link asking him to set his password. But only in the first case a webhook is triggered.
I'm using the default e-mail templates for both cases (named "Email Verification" named "Setup Password") and everything seems to work fine (and a working password is set in the second scenario) except for the missing event in the second case. I've activated all webhooks for the tenant and in the webhook configuration to be sure.
Is that intended? And if so, is there any possibility to get notfied once a user has successfully finished the registration process (by setting a password and confirming his e-mail address on the way)?

JHipster Social Login - make email a mandatory field

I just setup the basic JHipster application and set in the FB client ID and secret. However, when I try to login by not sharing the email - I see that it gets redirected to my app with a success. I can handle the no email exception on application.
Instead , I wanted FB to make sure that my email was a mandatory field. How do I do that?
You can't force Facebook to return an email address for a user. It may also be null on their end (if the user signed up with a phone number). You will have to handle it in your application. This is the same case with Twitter - they simply don't provide the user's email.
Note, even if you request the email permission it is not guaranteed you will get an email address. For example, if someone signed up for Facebook with a phone number instead of an email address, the email field may be empty.
https://developers.facebook.com/docs/facebook-login/permissions/
Like you mentioned, you need to handle it in your application. You could catch the fact the email is null and prompt the user to enter an email.

Resources