So I'm getting the user's email address during login over OAUTH with LinkedIn as per https://developer.linkedin.com/blog/making-it-easier-you-develop-linkedin
However, it doesn't seem that there's any way to ensure this is a "verified" email address as opposed to one that anyone could pretend to claim.
Other providers I've used won't serve up the primary email address for a user if they've not verified, and in fact often won't Auth at all. LinkedIn however seems to.
Does anyone know if this is by design or if there's a workaround?
If your application has implemented LinkedIn's OAuth 2.0 UI within the past year, it is likely you are already using the new OAuth 2.0 UI and no further action is required. What's new?
You can also verify your email address through LinkedIn.com: Sign in to your LinkedIn account. Click the Me icon at the top of your LinkedIn homepage. Select Settings & Privacy from the dropdown. Under the Sign in & security section, click Change next to Email addresses. You'll then see the email addresses associated with your account.
Authenticating with OAuth 2.0 Overview. The LinkedIn API uses OAuth 2.0 for user authorization and API authentication. Applications must be authorized and authenticated before they can fetch data from LinkedIn or get access to member data. Follow one of the two authorization flows in Permissions to get started.
For example, Marketing APIs must use Member Authorization. Always request the minimal permission scopes necessary for your use case. You can explore the OAuth Sample Applications that enables you to try out RESTful OAuth calls to the LinkedIn Authentication server. Additionally, you can also explore the Marketing Sample Application.
check out the OAuth v2 they use now, it requires a validated email address.
I can confirm that as of 6/20/2016, LinkedIn DOES NOT allow OAUTH authentication with accounts that do not have a verified email address. If you try authenticate with LinkedIn you'll get the following error screen while allowing access:
However, I was unable to find any official documentation on this matter.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With