usercredentials table schema

[anonymoussprocket]

Column	Data Type	Description
userid	numeric, primary key	FK into users table
oauthprovider	text, not null	OAuth service (OpenID, Github)
oauthtoken	text, not null	OAuth token
effectivedate	datetime, not null
duration	numeric, not null	seconds til oauth token expiration

[leenpaws]

2FA?

[vishakh]

@leenpaws This is just the database table design. 2FA is left to the login providers, e.g. GitHub or OpenID.

[ivanopagano]

should we capture here additional info provided by the OAuth provider, if any?

e.g. email, account-name

[anonymoussprocket]

What do you mean by 'account-name'?

For now, we want to avoid recording email due to GDPR concerns.

[ivanopagano]

I see the email anyway in the user table?