pcas00/bc_css_sandbox — pull request #28 by keera (2012-08-02 04:59:27+00:00)
Title: Facebook api

ready for testing. Let me know if you want me to add email verification as well.

Some design decisions:

Associate user w/ existing account? I thought about doing this by associating common emails.
But this is impractical and insecure b/c
1) We do not verify emails. Yet.
2) Existing email may change, and separate account may be created anyway.
3) FB user may change email to reflect an existing email. Bad. And the fact that you can change your first and last names doesn't help either.

So, it's best to simply treat FB accounts as separate even if it's the same user. More secure. More reliable. And it's not likely users will be switching back and forth either.