自动合并Facebook和内部用户 [英] Auto Merge Facebook and Internal Users

问题描述

在我们的系统中，用户可以有多个电子邮件地址，并将其设置为主要电子邮件地址.他们可以使用其主要电子邮件地址和密码登录.

In our system, users can have multiple email addresses, and set one as their primary. They can login with their primary email address and password.

我们正在考虑添加Facebook登录名.

We are looking at adding in a Facebook login.

我的问题是:

当某位fb用户登录"并且我们看到该fb用户的电子邮件与我们内部用户数据库中该用户的电子邮件地址匹配时，可以安全地继续并合并"这些帐户，以便fb用户可以看到内部用户的数据吗?还是一种更好的做法是给用户一些提示，让他/她可以链接他们的帐户，然后在合并之前引导他们通过内部帐户进行身份验证的过程?

When a fb user 'signs in' and we see that the email for this fb user matches an email address for a user in our internal user database, is it safe to go ahead and 'merge' these accounts so that the fb user can see the data for the internal user? Or is it better practice to give the user some hints that he/she can link their accounts and then guide them through a process of authenticating with the internal account before merging?

问题也将出现在相反的情况下，某人首先使用Facebook向我们注册，但现在正在使用其电子邮件地址创建一个帐户，该电子邮件地址与我们一个Facebook用户的电子邮件地址相匹配.然后，我们应该继续自动合并用户，还是引导他们完成身份验证过程?

The question would also be for the opposite case, where a person first signed up with us using facebook, but now is creating an account using their email address, which matches the email for one of our facebook users. Should we then go ahead and auto merge the users or walk them through an auth process?

我想我尚不清楚我们管理的电子邮件与Facebook管理的电子邮件之间可能发生的异常情况，我担心如果这些异常情况之一导致某些帐户崩溃，可能会产生什么影响.

I guess I'm a unclear of the oddities that could take place between emails that we manage and ones that facebook manages and I'm concerned about what may be the impacts if one of these oddities hoses some accounts.

任何见解都会受到赞赏.

Any insights are appreciated.

推荐答案

来自Facebook登录流程文档:

From Facebook login flow documentation:

'使用Facebook成功登录后，您将拥有该人的电子邮件地址，Facebook ID和访问令牌.您的应用应搜索使用相同电子邮件地址创建的现有帐户.如果存在一个帐户，则应合并两个帐户，然后将Facebook信息添加到现有帐户中-如上文所述.'

'After a successful login using Facebook, you will have the person's email address, Facebook ID, and access token. Your app should search for an existing account that has been created with that same email address. If one exists, you should merge the two accounts and add the Facebook info to the existing account - as recommended above.'

对我来说，这听起来像是我们应该与匹配的电子邮件自动合并.感觉这里有错误的余地...如果我错了，请纠正我.

To me, this sounds like we should auto merge with matching emails. Feels like there's room for error here... correct me if I'm wrong.

-编辑-

我们决定不进行自动合并.太多的错误空间.我们不久前决定了这一点...只是现在可以进行更新了.

We decided against auto merges. Just too much room for error. We decided this a while ago... just now getting around to updating this.

这篇关于自动合并Facebook和内部用户的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！