Question - Any reason for OAuth being only available on signin's and not signups? about nextjs-subscription-payments

[nyxb]

@nate-oo

Question 1: Using OAuth for Sign-Ups

There is no technical reason to restrict OAuth social providers to only sign-in forms and exclude them from registration forms. Supporting both registration and sign-in with OAuth can enhance user experience by providing more flexibility and reducing barriers to entry. This can lead to higher user adoption and a smoother onboarding process.

• Supabase
• Restack

Question 2: Linking Accounts with Different Sign-In Methods

Yes, if a user initially signs up with an email and password, and later signs in with an OAuth provider like GitHub, the accounts can be automatically linked if the email addresses match. If the email addresses do not match, additional steps are required to link the accounts manually. Providing users with guidance can help avoid confusion and ensure accounts are properly linked.

Conclusion

Using both email/password and OAuth for authentication is feasible and can improve user experience and security. By providing clear instructions and leveraging Supabase's capabilities, you can create a seamless and secure authentication system.

References:

• Supabase Authentication Documentation
• GitHub Discussion on Linking Multiple Authentication Providers
• Comparison of Supabase Auth and NextAuth

[nate-oo]

Thanks, @nyxb! That helps clarify it for me.