deprecate twitter login

This commit is contained in:
Andrea Vos 2022-11-13 11:03:19 +01:00
parent 2e75429c0d
commit 73ca818463
2 changed files with 21 additions and 0 deletions

View File

@ -0,0 +1,20 @@
# We don't recommend using Twitter login
<small>2022-11-13 | [@andrea](/@andrea)</small>
We've always been [delegating user authentication](https://avris.it/blog/passwords-are-passé)
to companies and open-source communities that have better resources than us to handle security concerns,
like email providers (login via email confirmation code) and social media websites (login with OAuth).
Unfortunately, it seems that Twitter might not be a company whose level of security should be trusted anymore.
Their recent layoffs and resignations have left them with vastly reduced staff, including security stuff.
Twitter's political significance makes it particularly vulnerable to hacker attacks, especially now
when the company seems to be struggling with internal chaos.
**We strongly recommend setting up a different login method
and [disconnecting the PronounsPage app from Twitter](https://twitter.com/settings/connected_apps)**.
[comment]: <> (https://twitter.com/ihearthestia/status/1590888585825521665)
[comment]: <> (https://twitter.com/iteamon/status/1590736948540284928)
[comment]: <> (https://twitter.com/TCBullfrog/status/1590866499862147073)
[comment]: <> (https://twitter.com/zsoltsandor/status/1590836099798413312)

View File

@ -19,6 +19,7 @@ export const socialProviders = {
linkRegex: (p) => `^https?://(?:www.)?twitter.com/${p.name}/?$`,
redirectViaHome: true,
avatars: true,
deprecated: 'https://en.pronouns.page/blog/twitter-login-deprecated',
},
discord: {
name: 'Discord',