3 ms·
Developer should just ask for user's email after new sign up using third party provider. Even Facebook does not require email for user to sign up. They should s
by mssio 6y ago
Developer should just ask for user's email after new sign up using third party provider. Even Facebook does not require email for user to sign up. They should separate the email used for the account & the email used for third party sign in. Because 1 user can have multiple third party sign in, all with different email.
I think they did not need to care about customer who did not check the reply email from support, because customer can also have multiple email and did not use their primary email to sign up to your service.
- esperent 6y agoWhat's to stop someone signing up with a fake email and sharing it on a forum so that many people can sign in with it? Yes, I know that there are ways to reduce this by scanning IPs and so on, but by using third party auth you offload that onto the auth providers.