TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Thoughts on Only allowing login by OAuth

1 点作者 ninadmhatre大约 8 年前
I am in the process of releasing my webapp which requires users to login to my app first and create profile but instead of using the own login functionality i am only relying on OAuth and i am allowing users to login with Google&#x2F;FB&#x2F;Microsoft&#x2F;GitHub&#x2F;Linked-In. Only information i want is their email address (and optionally First &amp; Last name). I am also displaying what information is received from respective provider.<p>My reason for not implementing my own login is it may not be as secure as the biggies in the business, i don&#x27;t have to deal with the mess of activation&#x2F;reset password thing, OAuth is fairly simple and less complicated to implement.<p>I signup to other sites using OAuth just to avoid remembering another user&#x2F;pass, but do you think its a good idea to completely rely on Oauth?<p>I can add the help page link &#x2F; button to assure user why i am using OAuth but still will it affect the user signups and BTW all services will be free on my site.

3 条评论

detaro大约 8 年前
Really depends on what your app does&#x2F;what field it is in (what do other apps in the space do?), and there are nearly always going to be users for which one of the two is not an acceptable solution.<p>For social type stuff, Facebook&#x2F;Twitter seems quite established, with professional or technical tools I&#x27;d be more careful.
评论 #13938180 未加载
brudgers大约 8 年前
Curious if the app really needs login.<p>If it does, I would definitely favor using something well tested rather than trying to invent a new login process.<p>If it does not, I favor reducing the friction for finding users (which is different from the number of email addresses a site can collect) by making giving an email address opt-in.<p>Good luck.
评论 #13938169 未加载
davidfm大约 8 年前
I never use the OAuth option personally. I wouldn&#x27;t read a help page. I always offer both OAuth and email&#x2F;password in implementations. I don&#x27;t find managing my own logins difficult. Having said that, the percentage of users who opt for OAuth is much higher.
评论 #13938175 未加载