I am building an Ionic application that needs to have login buttons with major social sites and merge those accounts if that's the case (email or phone match). My concern is that by using the access token on the ionic side a bad user can send false data to the backend sever so I end up merging wrong accounts. Is it a valid scenario sending the access token (ssl channel) to the backend after login on the social site and have the backend query the social site for the sensitive information?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.