HNHacker News
TopNewBestAskShowJobs

confuseddeputy

75 karma · joined September 4, 2021

submissionscomments
confuseddeputy··on Google’s OAuth login doesn’t protect against purchasing a failed startup domain
I am pretty confident that the statement is false.

The `sub` claim value is equivalent to the user ID that's exposed in the Directory API, it's derived from the underlying user account's unique user ID, and it won't change unless the user account is recreated.