5 ms·
> FYI - never use oauth to log into anything you care about. Interesting remark. I'm not objecting but it's interesting that this goes against what can one rea
by rad_gruchalski 6y ago
> FYI - never use oauth to log into anything you care about.
Interesting remark. I'm not objecting but it's interesting that this goes against what can one read here very often from people who comment on new products, which goes like this: "if you offered oauth sign up, I'd sign up but won't bother with creating an account". Just an observation.
- cblconfederate 6y agodo you mean OpenID? I guess oauth is OK for signups if the tokens were expiring. But usually you naively give the credentials to a new startup, only to find out they abuse them months later.
- dudul 6y agoCan you elaborate on that? How can they abuse it? Your oauth provider will show you which permissions the app is requesting when you grant them access. What kind of abuse have you seen?
- malka 6y agoI'm the opposite. 'only Google and Facebook Auth ? Can't create account ? Bye.'