ProfileScreen should ask for confirmation before deleting the account and unlinking a "sign in method" #9679
Replies: 3 comments 2 replies
-
It's related to this, maybe some duplication |
Beta Was this translation helpful? Give feedback.
-
Seconded on this, this makes it very dangerous to include the profile screen in production apps. Hopefully this gets the attention it needed. |
Beta Was this translation helpful? Give feedback.
-
This issue makes me uncomfortable using Edit: And also, this could just be my ignorance, but my current implementation only has email/password sign-in. If they tap the icon, not knowing what they've done, and then at some point sign out, I believe they've abandoned their account and its data? That's really bad to me. |
Beta Was this translation helpful? Give feedback.
-
In the default profile screen the user can unlink the sign in methods they desire.
However, no confirmation is asked before unlinking. A miss click might unlink a user from a service method.

Making things worse, you can remove all the sign in methods and not be able to log in again:

Even if the user tries to re-enable it, they are asked to log in again to re-enable a sign in method:

And I just realized you can even delete the account without asking for confirmation as well! (if you don't have any sign in method)
Beta Was this translation helpful? Give feedback.
All reactions