3 ms·
I think OAuth logins are a nice compromise. "Login with Google / Facebook / ..." with one click works well! Unfortunately, some sites use it to just get your e
by Scaevolus 9y ago
I think OAuth logins are a nice compromise. "Login with Google / Facebook / ..." with one click works well!
Unfortunately, some sites use it to just get your email address, and still require you to make a password for them, which defeats the purpose and decreases user trust in the benefits of going through the flow.
- joshontheweb 9y agoThis can be pretty annoying for users and developers though. If the user forgets what account they last used and selects a different one next time then it ends up creating an entirely new account unassociated with the first. If I ever do social integration, I require a plain old email based login first and then allow them to connect their social accounts to it.
- lewisl9029 9y agoOne way around this (from the developer's side) is to federate together different identities for a user using something like dex [1], and segregating your login and signup paths, so attempts to login will never create a separate account. [1] https://github.com/coreos/dex https://github.com/coreos/dex