What should be authentication strategy between client and server when only social providers login authentication is used?
问题 Given the following conditions: A website only uses social providers in order to authenticate users (Google/Facebook). There's no native authentication. Only some sections (e.g. product reviews) are restricted. The website communicates with the server (same domain). What would be the best authentication strategy? - Only use social providers In this case: We need to research the refresh/revoke token mechanism per each provider and implement it. - Use social providers in order to verify the