Advanced Feature: OAuth

General discussion of development ideas and the approaches taken in the 4.x branch of phpBB. The next feature release of phpBB 4 will be 4.0/Triton.
Forum rules
Please do not post support questions regarding installing, updating, or upgrading phpBB 4.x. If you need support for phpBB 3.3.x please visit the 3.3.x Support Forum on phpbb.com.

If you have questions regarding writing extensions please post in Extension Writers Discussion to receive proper guidance from our staff and community.
Post Reply
halil16
Registered User
Posts: 6
Joined: Tue Mar 01, 2022 8:47 pm

Advanced Feature: OAuth

Post by halil16 »

As it is known, in phpBB4, with OAuth provider users will be able to register to our forums. This is very nice. But I have an idea to make it even nicer. When the user registers with the OAuth provider, profile information such as name and surname, date of birth should be filled automatically. Thus, the user profiles are mostly ready.

GTi
Registered User
Posts: 12
Joined: Sun Aug 29, 2021 6:40 pm

Re: Advanced Feature: OAuth

Post by GTi »

halil16 wrote: Thu Mar 10, 2022 8:18 pm profile information such as name and surname, date of birth should be filled automatically. Thus, the user profiles are mostly ready.
Would you want your first name and your surname and your date of birth displayed on a forum by default?

All that privacy stuff a few years ago came in for a reason, to give people control of their own data, like where it is used and where it is shown.

User avatar
3Di
Registered User
Posts: 951
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Contact:

Re: Advanced Feature: OAuth

Post by 3Di »

halil16 wrote: Thu Mar 10, 2022 8:18 pm As it is known, in phpBB4, with OAuth provider users will be able to register to our forums.
Wrong, users can link their account to the Oauth during the standard registration phase.

Same applies for phpBB3 BTW.
halil16 wrote: Thu Mar 10, 2022 8:18 pm When the user registers with the OAuth provider, profile information such as name and surname, date of birth should be filled automatically. Thus, the user profiles are mostly ready.
Each Oauth delivers different data, therefore that's not applicabile.
Extension writers can make the use of an event created on purpose (already) to achieve that functionality, though.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades

halil16
Registered User
Posts: 6
Joined: Tue Mar 01, 2022 8:47 pm

Re: Advanced Feature: OAuth

Post by halil16 »

I can understand that this is something about privacy that some people don't want. But it could be like this. The user connects with Facebook, for example. Afterwards, the name and surname are automatically entered in the registration form. The user can delete it.

In addition, Facebook, for example, necessarily shares the name and profile picture with the application / site.

What is phpBB3 BTW?

GanstaZ
Registered User
Posts: 21
Joined: Wed Apr 11, 2018 4:58 pm

Re: Advanced Feature: OAuth

Post by GanstaZ »

As much as i remember, there are no fields for name and surname in default installation & no need to add extra fields into default installation. As 3Di said above, you can achieve most of it with extension/s.
Last question you can answer yourself, because you have been using that phpBB version for some time now.

User avatar
3Di
Registered User
Posts: 951
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Contact:

Re: Advanced Feature: OAuth

Post by 3Di »

halil16 wrote: Fri Mar 11, 2022 8:18 pm What is phpBB3 BTW?
BTW it's the acronym of By The Way - https://dictionary.cambridge.org/dictio ... by-the-way

I should have written this as
Same applies for phpBB3, BTW.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades

User avatar
david63
Registered User
Posts: 355
Joined: Mon Feb 07, 2005 7:23 am

Re: Advanced Feature: OAuth

Post by david63 »

Transferring personal data from one database application to another would be in breach of GDPR.
David
Remember: You only know what you know -
and you do not know what you do not know!

User avatar
3Di
Registered User
Posts: 951
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Contact:

Re: Advanced Feature: OAuth

Post by 3Di »

david63 wrote: Fri Mar 11, 2022 10:08 pm Transferring personal data from one database application to another would be in breach of GDPR.
Not in this case as it is the owner of his own data who consents to the transfer during registration, he has to consent by login to access the personal data of the other database, which allows him to access and pass it on. But this is another matter. This is the philosophy of Oauth and its beginnings.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades

User avatar
david63
Registered User
Posts: 355
Joined: Mon Feb 07, 2005 7:23 am

Re: Advanced Feature: OAuth

Post by david63 »

3Di wrote: Fri Mar 11, 2022 10:39 pm Not in this case as it is the owner of his own data who consents to the transfer during registration
That is not strictly true. Whilst it might his information he is not the "owner" of that data as the owner of that data is the person who owns the database.

There may be ways around this such as when submitting your data to the database there may be a clause within the T&Cs that specify that the data can be used in this way or there could be an option when accessing the second site that specifically allows access to the personal data in the "host" database.
David
Remember: You only know what you know -
and you do not know what you do not know!

User avatar
3Di
Registered User
Posts: 951
Joined: Tue Nov 01, 2005 9:50 pm
Location: Milano 🇮🇹 Frankfurt 🇩🇪
Contact:

Re: Advanced Feature: OAuth

Post by 3Di »

Nope.

I do not want though to open a debate on this subject here.
🆓 Free support for our extensions also provided here: phpBB Studio
🚀 Looking for a specific feature or alternative option? We will rock you!
Please PM me only to request paid works. Thx. Want to compensate me for my interest? Donate
My development's activity º PhpStorm's proud user º Extensions, Scripts, MOD porting, Update/Upgrades

Post Reply