Вопрос

My website use OAuth to achieve social sign in, we need to create a unique local account for each OAuth users, currently we use String id as an identity of each unique user, but if two users from different OAuth providers with same id there will be collision.

My questions are:

  1. Is user id unique across all OAuth providers, such as Facebook, Twitter, Google...?
  2. I see some of the providers use String id and some with Long id, is it safe to just convert long id to String and keep unique?
Это было полезно?

Решение

No, user id is not unique across all OAuth providers, but if you connect it with the provider id then it will be.

Другие советы

Best way to achieve unique is prefix with OAuth provider,

for example if the user Id return by Facebook is xyz12345 then you can use userid as facebook_xyz12345

Лицензировано под: CC-BY-SA с атрибуция
Не связан с StackOverflow
scroll top