Android Question Firebase / google account list / why not?

[wimpie3]

Yes, I know we have Firebase services now, but I just thought about something.

There is a function to list all the Google accounts on the phone. We can be sure these accounts belong to the current user since you cannot add them on your phone without a correct password.

So why not use one of these local Google accounts as a login identifier? Someone else cannot pretend to be us, since they have to add the account first on the phone and they cannot do that without our password.

Am I missing something here?

 

[Erel]

You are raising a good point.

Whether it is enough to check the phone accounts or not depends on your requirements. For example if you want to allow the user to log-in to the service that you provide from multiple devices and computers then it makes more sense to use FirebaseAuth and allow the user to manually log in with Google or Facebook.