I am using passport.js to enable users to log in with Facebook.
However, using the documentation and different tutorials, it seems it's common to let the user log in with Facebook and automatically create a local account, but without setting the password.
Wouldn't it be best practice to require the user to set a password after logging in with Facebook? It seems wrong that you can have a user without having a password.
via Jamgreen
No comments:
Post a Comment