What in the facebook API becomes the password_hash and salt when a user signs up and authenticates using facebook?

I thought there was a portion of users who – if they have their facebook settings set a specific way – could possibly both authenticate using facebook and also set a password. I think that’s my problem. Or I might have a different problem. Either way I have a user with Facebook() as a login and a…

I am not following. It doesn’t matter at all. You don’t have chance to set password when using an OAuth services if they provide username and email. The user can use their setting page to reset their password.

Users can authenticate against any of the available mechanisms. As long as the email is the same, a single account can authenticate against Google, Facebook, or a local password. Does that explain what you are seeing?

I had the same question. Why the password_hash (or salt) still set in DB for an account registered through OAuth providers (I use Discourse OAuth2 Basic plugin). My experiment proves that users are able to login (if one doesn’t disable “enable local logins” when OAuth2 is enabled and setup) through …

password_hash & salt with facebook authentication

Development

fantasticfears (Erick Guan) April 16, 2016, 1:58pm 2

They are remain empty.

Topic		Replies	Views
Logins with Google and Facebook Development	5	1214	December 9, 2016
Change Authentication Method from Facebook to Mail Product Support	7	1031	July 3, 2019
Facebook, Google+, Twitter login only Product Support	1	927	June 1, 2016
Find all users who used "login with facebook" Data & reporting oauth2 , sql-query	5	1594	August 8, 2025
Is there a way of finding users who authenticated with Facebook? Product Support	1	631	December 17, 2020

password_hash & salt with facebook authentication

Related topics