Hacker News new | ask | show | jobs
by tluyben2 1485 days ago
We simply have both status (not verified) and a type (password) fields; so an type sso login or signup will never encounter a type password record and a not verified record will never let you get logged on. Then we purge not verified records every few days.