Skip to main content
Software Engineering

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

5
  • 3
    In your registration flow, what can a user do between the OAuth step and providing name & username? Can they close their browser session? Can they use the site in any way? Commented Oct 3, 2024 at 13:37
  • After the initial OAuth login, the user does not gain any privileges compared to anonymous users, except the sign in page will directly redirect them to the registration form. They should be able to close the browser session and try to log in again later. Commented Oct 3, 2024 at 16:10
  • If they user cannot do anything except complete their user profile, do you need anything saved to the database at all prior to submitting the profile form? I don't see two steps at all. At least not from a data storage perspective. Commented Oct 3, 2024 at 17:00
  • I need to store and track the session in the database (I'm using db-backed sessions). I omitted this in the post, but I'm also storing metadata info from the OAuth provider when the user first logged in, with another separate table. Commented Oct 3, 2024 at 17:28
  • The session is transient data, not a core part of someone's user profile, especially when there is no user profile. Commented Oct 3, 2024 at 17:46