TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Is “sign in with Facebook” dead for indie developers?

25 点作者 santah超过 1 年前
On my service - <a href="https:&#x2F;&#x2F;next-episode.net" rel="nofollow noreferrer">https:&#x2F;&#x2F;next-episode.net</a> - along with signing in with username and password, there is an option to sign in with Google and Facebook.<p>3 days ago, I get this email from Facebook &quot;Complete business verification for Next Episode&quot; which notifies me that my Facebook app (which handles the Facebook login functionality) now needs to be connected to a verified business account.<p>This is where they announced this back in February: <a href="https:&#x2F;&#x2F;developers.facebook.com&#x2F;blog&#x2F;post&#x2F;2023&#x2F;02&#x2F;01&#x2F;developer-platform-requiring-business-verification-for-advanced-access&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;developers.facebook.com&#x2F;blog&#x2F;post&#x2F;2023&#x2F;02&#x2F;01&#x2F;develop...</a><p>Now, going through the steps of filling out my name, address, phone number etc, I checked the &quot;How we use your information&quot; link and in it, it said &quot;In certain cases, we&#x27;ll update your publicly available Page Transparency information with some of the details you confirm during verification&quot;.<p>In the Page Transparency information page: <a href="https:&#x2F;&#x2F;www.facebook.com&#x2F;help&#x2F;323314944866264&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.facebook.com&#x2F;help&#x2F;323314944866264&#x2F;</a> it says the information about the owner may include &quot;The Confirmed Page Owner&#x27;s verified legal name and registered city, country and&#x2F;or phone number&quot;. Later on, on the same page, they say you can remove (or request to remove) some of the information visible there, but they never specify which information you&#x27;ll be able to remove.<p>Anyone with an experience with this? I don&#x27;t want my address and&#x2F;or phone number publicly visible, so what are my options here?<p>For now, I have removed the option to sign up with Facebook (existing users can still use it to sign in) and I plan to completely remove it (by the time the December 11th deadline comes around) notifying users about the change upfront and giving them the option to switch to Sign in with Google or with username and password.

9 条评论

toomuchtodo超过 1 年前
Could you switch to just using passkeys instead of Google, Apple, or Facebook federated identity? This eliminates the risk of storing passwords, and also doesn&#x27;t create a dependency on one of the companies mentioned. You&#x27;ll still need to store username, email, or both, depending on your use case. You can also create a code path that will transition accounts from federated identity to self hosted with passkeys as well.<p><a href="https:&#x2F;&#x2F;passkeys.dev&#x2F;docs&#x2F;tools-libraries&#x2F;libraries&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;passkeys.dev&#x2F;docs&#x2F;tools-libraries&#x2F;libraries&#x2F;</a><p><a href="https:&#x2F;&#x2F;passkeys.directory&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;passkeys.directory&#x2F;</a><p><a href="https:&#x2F;&#x2F;www.corbado.com&#x2F;blog&#x2F;user-transition-passkeys-expert-strategies" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.corbado.com&#x2F;blog&#x2F;user-transition-passkeys-expert...</a>
seydor超过 1 年前
Same here.<p>For transparency reasons I will also be listing Mark Zuckerberg&#x27;s phone, postal and residence address on our contact page (100% of the support requests we get are about facebook problems anyway)
edent超过 1 年前
It depends on what level of access you want. My app just uses basic verification - I get to see the user&#x27;s name, Facebook ID number, and photo. That&#x27;s it.<p>I don&#x27;t have to provide any of my personal data as a developer to Facebook. I do have to provide a privacy policy. I haven&#x27;t received a similar email to you.<p>As that blog post says, Business Verification is required for &quot;Advanced Access&quot;.<p>So, if you can, change the level of access that you need. If all you&#x27;re using Facebook for is an identity provider see if you can drop the number of permissions you&#x27;re requesting.<p>If that fails. Get a cheap disposable SIM and use that as your phone number for Facebook verification.
评论 #37350565 未加载
gmerc超过 1 年前
Every year september &#x2F; october FTC compliance push happens - and your product will get randomly flagged and disabled by AI.<p>This year, there’s gonna be even fewer humans to correct the madness. Not having FB login is a mercy, not a mistake.
NoZebra120vClip超过 1 年前
I don&#x27;t know what country you are in, but if you are concerned about a phone number and postal address, there are myriad ways to obtain both of those which can effectively obscure your location and identity.<p><pre><code> * Get a Google Voice or other VoIP provider. * Get a burner cell phone. * Get a business account with your PSTN provider and run an Asterisk PBX or something. * Obtain a PO Box at your US Postal Service, UPS Store, or an independent provider of boxes. * Identify a coworking space where you can receive postal mail, and use its address. </code></pre> Since you are a business, (you are a business, or just an &quot;indie developer&quot;?) then you should be able to establish business-class accounts in this manner and satisfy Facebook&#x27;s requirements. They do not seem overly onerous.
评论 #37358278 未加载
评论 #37350684 未加载
评论 #37350335 未加载
lifechoseme123超过 1 年前
This may be what you&#x27;re looking for.<p>Something like OAuth2 or OICD &quot;Permission Scopes&quot; -- the permissions that a user can grant your app, just prior to their accepting the log in via that particular social-media authentication provider.<p><a href="https:&#x2F;&#x2F;developers.facebook.com&#x2F;docs&#x2F;permissions&#x2F;reference&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;developers.facebook.com&#x2F;docs&#x2F;permissions&#x2F;reference&#x2F;</a><p>Here are examples:<p><a href="https:&#x2F;&#x2F;www.loginradius.com&#x2F;blog&#x2F;engineering&#x2F;facebook-authentication-using-node-and-passport&#x2F;" rel="nofollow noreferrer">https:&#x2F;&#x2F;www.loginradius.com&#x2F;blog&#x2F;engineering&#x2F;facebook-authen...</a>
bcx5k15超过 1 年前
&gt; Anyone with an experience with this? I don&#x27;t want my address and&#x2F;or phone number publicly visible, so what are my options here?<p>Depending where you are, you may <i>already</i> be required to share this information, for example any business here in the UK must have their company registration number , registered office address, and contact (email and post) details, on any website.
mdrzn超过 1 年前
I would remove the FB option, maybe add some other services (like Discord or Twitch or whatever) just to offer different options.
andrewfromx超过 1 年前
Yeah and to sign in with apple on your website, you MUST have an ios app in the app store. i.e. pay $99 a year.
评论 #37350303 未加载