1
vote
2answers
105 views

Which login system should I use?

I am currently developing a website with a login system. The server will not have HTTPS available and will not handle critical data such as credit card info or addresses, the most critical data ...
5
votes
3answers
187 views

Logging in with email only

I'm working on a blog and there will be an option to post a comment. I could implement registration with username, password and email — the standard way. I could implement 3rd-party authorization ...
1
vote
3answers
180 views

Should (and how should I) I use email addresses for login without validating them?

So that users don't have to remember a username, my webapp doesn't ask users to enter one (accounts are private and there are no profiles or user-generated content). However, I would also prefer not ...
13
votes
4answers
1k views

If your login is an email, should you canonicalize/lower-case it?

A lot of sites today don't have a username, just a "login email". If a user opened an account as foo@mymail.com, and are now trying to login using FoO@mYmAiL.cOm - should we accept this login as ...
12
votes
4answers
552 views

email field or username for logging in an application?

What is the best solution for an app : Email or username field? I like email because: it's unique user will easily remember it's personal (which can be a disadvantage sometimes; Multiple users on ...
11
votes
4answers
463 views

When a user's login email has been changed, what should happen?

I'm making an online frontend for a system. This system is normally used by a business providing a service to a customer. The customer will have the option of using this online frontend in addition to ...