This a broad question but didn't find exactly what I was looking for.
I'm working on a website that currently has a registration process but would like to provide a facebook login functionality. They are currently many users using an email / pwd combination so would need to handle new and existing users. If user creates account via facebook, would also like to create a user account with email and a NULL password (they could update later via a 'forgotten' password).
Basically, I'd like to authorize either via:
- their email address and a 6+ alphanumeric for authorization (current system).
One goal is to have all users login with facebook so that we can use their profile information and friend lists to create a more compelling user experience.
The case that seems a little tricky is previous users who then use facebook to authorize. The only thing that seems logical is to use extended permissions to get the users email and then update our users table with their user_id. Are proxied emails still used by FB? I haven't been able to find a site giving the end user that choice.
Is the above scenario an accurate representation of how this should be handled? Or if somebody has done this before, are there things that I'm missing (one example being scenario where user changes email on account on facebook).
thanks