Authentication via OAuth vs. conventional login system. Which one to use?

0

Imagine the following scenario:

  

You are putting together a project where anyone can register with basic data (name, photo, age) to use your product. And since it's on the internet, there's no way to predict the number of potential users that can sprout from time to time.

Well, thinking about this, I'd like to know if it's worthwhile to use the APIs provided by companies such as Facebook, Twitter and Google to access their data (oAuth), or if is still in> it is worth keeping the traditional login style, providing a method of registering the user and saving their information on a server of their own.

In my opinion, apparently the strengths of using Outh would be:

  • Ease of registration on the part of the user;
  • Speed of data collection;
  • Resource saving (since data comes via external API);
  • Always updated data;

But since I've never met with this type of API, I honestly do not know if it's worth it or not, so mainly from the point of view of scalability, is it worth using oAuth APIs or conventional login? / p>     

asked by anonymous 06.05.2014 / 17:11

1 answer

3

What I'm going to answer is not an opinion, I think most programmers will agree, which makes it almost a rule.

There are advantages and disadvantages of using Facebook login and a conventional system.

Facebook login - Key benefits

  • Eliminate the need to create a new account on your site, just allow your application to collect information, preventing you from creating a new login and password;
  • Avoid filling out long application forms;
  • Avoid validating your account by email, as this step has already been carried out when you join Facebook;
  • The information is likely to be true since it is used in the user profile.
  • Updating data on Facebook itself, preventing the user from getting incorrect data in your application.
  • Facebook login - Key disadvantages

  • Some users are afraid to make data available on unknown websites.

  • Updates to the Facebook API, which can lead to login failures and consequently inconvenience to users. In short, it is necessary to follow closely the evolution of the tool.

  • Under the terms of use of Facebook, the final nobody knows when Zuckerberg will wake up in a bad mood and resolve to charge for the use of the tool and believe, with the recent modifications in Facebook, I do not doubt!

  • However, I use conventional login, I know people who have abandoned or just do not use Facebook.

    If there is patience, also implement the login with Google+ and Twitter.

    As I understand it, your application is in the beginning, if large companies (such as Pinterest, Yahoo, etc ...) use Facebook login to raise new users, the more we poor mortals.

        
    06.05.2014 / 19:18