4 ms·
Ideally, you have a flow where you ask the user to input their password to confirm ownership, then merge. Otherwise, you're allowing the OAuth provider to back-
by solatic 2y ago
Ideally, you have a flow where you ask the user to input their password to confirm ownership, then merge. Otherwise, you're allowing the OAuth provider to back-door into established accounts.
- block_dagger 2y agoGood call. I had not considered the OAuth provider acting nefariously.