vanillaforums/Garden — Issue #1192: Twitter sign-in bypasses application process
Author: Apreche
Created: 2011-10-30 17:20:57+00:00
State: open

I have my forum configured in such a way that new users must apply and be manually approved before posting. However, if I enable Twitter sign-in then any Twitter user can sign in and start posting immediately. I haven't tested, but I'm sure the same thing probably happens for OpenID, Google, Facebook and other authentication methods besides regular old password. That's a serious problem. I want to enable these methods to make it easier for approved users to sign-in, but don't want to let people walk off the street and start posting.