# What should password field be? **URL:** \ **Category:** Development\ **Created:** [21.Ноябрь.2016 00:57:47 UTC](https://meta.discourse.org/t/what-should-password-field-be/53167 "2016-11-21T00:57:47Z")\ **Posts on this page:** 1\ **Showing post:** 6
**Author:** ![adam\_beers](https://avatars.discourse-cdn.com/v4/letter/a/97f17d/32.png) [@adam\_beers](https://meta.discourse.org/u/adam_beers)\ **Post date:** [04.Декабрь.2016 06:21:39 UTC](https://meta.discourse.org/t/what-should-password-field-be/53167/6 "2016-12-04T06:21:39Z")
If I don’t use Firebase, but use the normal Discourse auth, what is the normal API flow for creating a user and then having that user login? How long do the user API keys last? Do they expire? Also, if I allow Google and Facebook logins, how are those users created in the Discourse server using API calls? The CURL for creating a user indicates that an api\_key and api\_username are required. What are those if a user is trying to create a new account and they don’t have a key or username? > curl -X POST --data “[name=dave&username=dave&email=dave@example.com](mailto:name=dave&username=dave&email=dave@example.com)&password=P@ssword&active=true” [http://localhost:3000/users?api\_key=test\_d7fd0429940&api\_username=test\_user](http://localhost:3000/users?api_key=test_d7fd0429940&api_username=test_user) --- _[View the full topic](https://meta.discourse.org/t/what-should-password-field-be/53167)._