2026-09-27 18:05 UTC
The way I see it, there are 3 methods that can be used:
- email (requires a provider like Brevo to send emails)
- oauth (Google, GitHub, Discord, Mastodon?)
- passkeys (computer finger print, Face ID on phone)
Ideally I’d implement as many choices for the user, but I’m not too keen on email. The thing I’m wondering about is what would be a user’s expectation when they are asked to sign up?
Replies (1)
-
@willpower232@phpc.social 2026-09-28 06:52
@loicfaugeron@phpc.social there's a good chance your service sends emails anyway so keeping it simple is probably helpful, at least at an early stage. I have seen that single sign on with Google or GitHub is all the rage these days but as others have said, now you're trusting multiple parties to guarantee users can log in