Back
Can I use Userid & password to Authenticate my Users?
Can I use Userid & password to Authenticate my Users? If So, Can I make it secure like They can only access things that are meant for them. I could Do Server-Side Validation too.
TL;DR
The user wants to know if they can use a Userid and password for user authentication and if it can be secure. According to the latest documentation, creating a session with a Userid is not possible. The only alternative is to use an email or phone number. However, an anonymous session can be created without an email or phone, but an email is required to turn it into an account. Server-side validation can also be implemented for added security. 
According to the latest docs, there is no way to create a session with a userId. You need to use either an email or phone number depending on the endpoint.
The only other way to create a session without email or phone, is an anonymous session, but you will still need to use an email if you want to turn it into an account.
There already a issue about this topic:
