FB OAuth Misconfiguration

In this article, I will talk about how I bypassed Mail verification with Facebook OAuth Misconfiguration.

First of all, I would like to start our program by saying target.com.
When I browsed target.com, there were login and register options available. It was an e-shopping store.

First, I tried to register normally and after entering a code that comes to the mail, we can register successfully. The first account I registered: account-1@target.com. When I try to register again with the same e-mail address, I get an error.

Then I clicked on the Register with Facebook option and on the Facebook page that opened, I clicked on “Edit access”

On the page that opens, I changed the button for access to the e-mail address to “I do not accept”.

Then a page appeared asking me to enter the e-mail address again and I entered the e-mail address account-1@target.com. The registration was successful.