Lost access to account due to github authentication bugging

Website URL

bennysnewbridge.page.gd

Error Message

This email address is already registered, but authentication with GitHub is not enabled. Please use a different login method.

Other Information

I was trying to log in to my account with my gmail, since that is what i used to register it to. But it sayed the same thing as the Github but with google. And when trying to add it to my account i saw only the option for github, and now when using the account that i authenticated to it says the following..

Judging by the message, it seems that you logged in with your GitHub account, which has a particular email address.

For security reasons, you cannot login to a profile with your email address if it’s linked to one authentication provider using another authentication provider. Incorrect handling of that is a common account takeover vulnerability, and we solved that by just blocking authentication with unconfigured providers.

If you want to login with Google instead (using the same email address), you can do so by first logging in again with GitHub, and then linking your InfinityFree profile to your Google account. Specifically:

  1. Go to the Profile menu.
  2. Then to Manage Authentication.
  3. Click the Link Google button.
  4. Login with your Google account.

That should be everything! You can then login with both Google and GitHub. You can also unlink your GitHub account if you want after that.

2 Likes

I get this message now when trying to login with github, is there a way we can fix this?
This email address is already registered, but authentication with GitHub is not enabled. Please use a different login method.

I tried just logging in with my email account and known password, both using the one that i have for my github, and for creating the website. Tried logging in with the github button and same result.

That error message tells me two things:

  • The GitHub account you’re using to login is not associated with an InfinityFree profile (yet).
  • The email address of that GitHub account already exists as a client area profile email, but that one does not linked to this GitHub account.

Do you perhaps have other GitHub accounts you could try?

Please be aware that it’s possible for a client area profile to have a particular email address, but be linked to a Google and/or GitHub account with different email addresses. I’m aware that this can make things confusing (and we do show warnings for that), but it’s a necessary evil to support multiple authentication methods.

5 Likes

I do not have other github accounts.

This all seems a bit unlikely to me, the scenario you’re describing should not be possible. And I’m not completely sure that this is not a bug on our end.

I’ve added some diagnostic logging for this use case. Could you please try logging in again and respond here once you did so I can check it?

5 Likes

I just tryied logging in with the known github account that i know that i used to authenticate

Thank you for the login attempt.

I checked the logs and I see quite a few entries, but nothing matching the profile corresponding to your domain name from the post. The profile email and ID in our system and the GitHub account email and ID do not show up at all.

I checked every single case where this error was returned in the time between my post and yours, and every single case was one where the profile existed but was using either Google or password authentication.


Based on this, my recommendation is as follows.

  1. Go to your GitHub email settings, and carefully check the “Primary email address” of your account. That’s the email address that GitHub sends to us when you try to login with GitHub: https://github.com/settings/emails
  2. Try requesting a password reset in our system using that email address. Either you’ll get a password reset link, or an email telling you which authentication methods are enabled for your email.
  3. Login using the email address and either the password or the authentication method listed in the email.

This will give you access to the profile associated with the email address of your GitHub account. But looking at the logs, it might not give you access to that website because I think it’s on a different profile.

So I suggest you also try to request a password reset using your domain name instead, and see where that email ends up. If it’s not sent to the email address associated with your GitHub account, you definitively know that it’s associated with a different email address (and GitHub account).

6 Likes

I did a password reset with domain name, and the email got sent to mans.j.anders*** gmail account and it says the following “Your account is configured to login with GitHub. To login please choose the Login with GitHub option instead.”

This is a public forum. you might not want to share your personal details (such as email address) publicly.

4 Likes

Thanks for noticing, i blurred it abit.

1 Like

That matches what I see on my end: the email address matches and is indeed using GitHub authentication. But I didn’t see any logs suggesting that you tried to login with the associated GitHub account. Both the email address and the GitHub account ID didn’t show up in the logs.

Can you please try the other steps I wrote before regarding the primary email of your GitHub account?

4 Likes

I just tried logging in with the email and password that i know that the github account is using, and also tried with the google account, also tried with the github button and google button.

So what can you tell about your findings? Were you able to access any other client area profile?

3 Likes

No, it only sayed when using password that it was not matching the credentals, or that authentication was not matching

I’m sorry, I’m trying to help you, but I need you to give me a little bit more than a single sentence per message that only partially answers the questions I’m asking you.

The only explanation I have for your login problems is that you have (or used to have) another GitHub account to which the profile is linked. But since you clearly state that you don’t, that creates some contradictions.

Could you please try the following and respond clearly with your findings for every individual step?

  • Check the primary email address of your GitHub account. Did it match the email address you found before corresponding to your domain name?
  • Attempt to do a password reset using the primary email address of your GitHub account? Did you get a password reset link, or did the email say which authentication methods were enabled? If it didn’t have a password reset link, which authentication methods did it say you could use?
  • If you got a password reset link before, could you try resetting the password and logging in?
  • If you got instructions to use a different authentication method, did you try that one instead?

Again, I’d like to resolve this, but I need you to work with me on this.

4 Likes

The primary email adress of my github account is not matched when i did my domain.

And doing a password reset with that same email gives me the message that the account with that email is linked with google. (This account that i am writing from)

And logging in it says following “This email address is already registered, but authentication with Google is not enabled.” And using the email with password that i know “These credentials do not match our records.” And trying to reset the password gives me the following “Your account is configured to login with GitHub. To login please choose the Login with GitHub option instead.”

And the cycle begins again.

Is there a possibility that you either have multiple GitHub accounts or you changed email-based privacy settings in the GitHub account associated with your InfinityFree account?

Changing your Primary Address might muddle things up.

Based on the findings you’ve shared, there is only one logical conclusion I can think of: you have (or used to have) a second GitHub account to which the domain name is linked.

You know the email address of the GitHub account, so that’s a good start. Can you try doing a password reset at GitHub using that email address and see if you can get access to that other account?

In our system, the GitHub and Google accounts are linked by account ID, not email address. We just copy the email address once as your client area email address when signing up, and store it internally afterward (because it’s useful feedback to you on the authentication management screen). But changing your GitHub or Google email account will NOT break authentication.

However, what will break authentication is deleting the associated Google/GitHub account and then signing up with the same email address. The new account will have a new account ID which is not linked to the profile on our end. So delete your Google/GitHub account will irrevocably break access to that authentication method.

5 Likes