Questions and Answers

In this section, you will find some useful questions and answers about Fewlines Connect.

User signin process

Tip
 What is the time to live for the validation codes ?

In order to validate an email address or a phone number, a validation code is sent to the User. This validation code lasts for 10 minutes before it expires.

Tip
 When email and phone number are both required identities, why does the User have to enter a verification code for each: the email and the phone number?

This process may seem tedious, but it’s mandatory if we don’t want to let Users claim identities they don’t own.

Let’s imagine a User creates a new account using his/her phone number and validate it with a code. If Connect then prompts for an email address but don’t send a code to validate it, it means the User might claim any email address he/she wants. Confirming the identities is a way to:

  • secure the User by making sure he/she didn’t make any typo when entering the identity

  • secure other Users by making sure he/she doesn’t try to steal someone else identity

Tip
 Can I pre-fill the email address in the Fewlines Connect login form?

Yes, in order to pre-fill the email address in the form, there are two parameters to add when calling /authorize:

  • auth with email as value. This parameter forces the selection of the “email” method on the authorization form

  • login_hint containing the email address as a value

Tip
 How can I identify which provider issued a token?

In order to identify the issuer/principal of the token, you can check the iss (issuer) claim. It’s present in the JWTs we issue and its value will always be the same for all tokens of a given Provider.

Note
 You can get more information on the RFC 7519.

Social login

Tip
 What are the social login providers that can be used with Fewlines Connect?

Here is the list of all the social providers that are implemented in Fewlines Connect:

  • Apple

  • Facebook

  • Github

  • Google

  • Kakao Talk

  • Line

  • Microsoft

  • Naver

  • PayPal

  • Strava

  • Vkontakte

Tip
 Why should I re-enter the email address (or phone number) after login with a social login service?

At Fewlines, data privacy is an important matter, that means we will never store unnecessary data in our database and we won’t get the User’s data from the other services. Also, we don’t want to take for granted that the email (or the phone number) the User entered during his/her signup process in the social provider is the one he/she wants to use in Fewlines Connect.

Note
 Keep in mind that this process is only required the first time the User uses a specific social login provider. For any future attempts, Users will be able to connect seamlessly.
Tip
 How can I renew the secret key used for Apple Connect?

In order to renew the Apple secret key you have to run the script (Sign In with Apple Client Secret Generator · GitHub) that generates the secret key. In the script 3 values have to be set:

Once you get the secret key, it should be transferred to Fewlines so that we will be able to add (or update) it in the provider’s configuration.

Translations

Tip
 What are the possible locale in Fewlines Connect?

Fewlines Connect is compatible with every kind of alphabet and reading direction. There is no geographic restrictions for the phone numbers that can be used in Fewlines Connect.

Note
 The cost of SMS messages may be different depending on the phone number’s country.
Tip
 Why, as a User, when I visit several applications, the locale of the Fewlines Connect stays the same, even if the default locale of each application is different?

The selection of the locale is based on several criteria:

  • if the User is not connected and has selected a locale himself/herself, we rely on what we have stored in a cookie. If none has been selected by the User, we fallback to the application’s default locale.

  • if the User is connected and has selected a locale himself/herself, we rely on what we have stored in a cookie. If none has been selected by the User, we fallback to the locales stored in his/her preference. It’s usually the locale used when he/she first logged in.

In order to see the default locale when browsing in several applications, you should try to visit the application with a clean session (either clearing all cookies or using a new private tab).

Tip
 Can I update the translations used in the Fewlines Connect?

No, the translations are handled on the Fewlines' side. The translations are the same for all providers and can’t be customized.

Table of Content