Social Media Login

Question

I'm making a web app that allows users to login with Google and Facebook. I currently use the email address as the unique identifier for an account. I've been doing some research on this and I'm curious as to whether or not that's a good idea. Some people have said this is not good because people can have different emails for both platforms. What matters to me is that someone is not able to spoof another's email. To my knowledge, both Google and Facebook require email validation, such that if I were to have an email address, [e-mail], another person would not be able to create an account on Facebook with that email. That would make the email unique. Does anyone see any problems with this approach?

Answer 1

its a nice idea. but the bad side would be limiting your app. like they told you, what if I change my email address?? that's a limit right there.
why not apply "Username" as the Unique ID.
this is my opinion