Hello, I talked to Aaron on IRC and he told me `userIdent` is often an email address because that's what Persona logins use. So adding the new route means exposing people's email addresses, which we don't necessarily want.
How do we fix this? Should Persona email addresses be considered public person IDs? Should there be a separate unique username field which isn't necessarily identical to the login name? (currently in my new web app there happens to be duplication where there are separate username and loginname fields, each used only for its implied purpose, which technically could be used to make then different in the future without causing any damage... we could do that here i suppose) --fr33 _______________________________________________ Dev mailing list [email protected] https://lists.snowdrift.coop/mailman/listinfo/dev
