有什么方法可以检测Twitter用户是否已验证其电子邮件地址？

Question

I have a whitelisted Twitter app that can request and receive email address of a twitter account when the owner of the account accepts and logs in through my app.

Now, I plan to connect it to my already available "Sign-up/Login by email" flow seamlessly.

The problem is, logged in Twitter user may not have verified their email account. In that case they can hijack a user on my system who signed-up with that email.

Therefore, I have to be sure that they have verified their email address. Otherwise I have to automatically send a confirmation link to the email address of the just-signed-in twitter user.

Is there any way to detect if the user confirmed their email address on Twitter? If not, what is the general solution to this problem? At least, how do you solve it for yourselves?

Answer 1

I found out that if the user does not verify their email address, Twitter will not return the email address even though it is there. So, if you receive an email address from Twitter, that should mean that the email address of the user is verified.

If anyone finds that this is not correct, please leave your comment or your findings.

Answer 2

Twitter returns a 0 length string in field email if user didn't verify his email.

...
translator_type: 'none',
email:''}