How do I set up Google Oauth to log in using a different Google Account?

Question

I created a member-only site that uses Google oauth2 to authorize users. The site is built with a Laravel frame and the Ardarek Oath Library .

When the authorization request comes from Google, I look at the user’s record in the database by e-mail and go to the protected page, if the record exists, otherwise the registration page.

The problem is that some of our members use two Google accounts. One user has registered through their main account (e.ge. [e-mail] ). The next day he returned and mistakenly tried to log in using [e-mail]. Naturally, the system showed him the registration page. From now on, every time he visits the site, the authentication mechanism sees it using his second (undesirable) set of credentials.

To resolve this case, I instructed him to log out of all accounts (on both sides), clear the cookies and start from scratch, but this is not a practical solution for all users. In those cases, even this measure does not seem to fix the problem.

How can I solve this case? What is the correct way to request authentication authentication and return it from the correct account? Can I get Google to ask the user with which account to continue?

Answer 1

Google will automatically ask the user which account they want for oauth if they have enabled account selection .

I signed up for my Google Apps and my Google Account, so for me, at oauth, I get the following invitation:

To do the same for their user, they need to click "Stay logged in", but, of course, this is not recommended for public computers.

In addition to the foregoing, I am afraid that much cannot be done. - if they logged in with [e-mail] at this time, these are the credentials that you will receive.

As I solve this problem, you need to have a field where the client can add additional emails and choose the one that is the main one. I will then check these emails when prompted to avoid duplicate user accounts.