> Currently it only supports Google login, mostly because I don't trust myself enough to safely manage and store credentials. Many schools are already in the Google ecosystem, so for now it should be enough.
That's senior-level decision making right there!
Storing creds is tough, all your users already have Google accounts, and most of them probably prefer logging in with a click rather than remembering a new set of creds. It also puts a higher barrier of entry for fraud, since new Google accounts require phone number verification.
I'm a SRE so if you need ideas for the hosting/infrastructure side of things, feel free to ask!
That's senior-level decision making right there!
Storing creds is tough, all your users already have Google accounts, and most of them probably prefer logging in with a click rather than remembering a new set of creds. It also puts a higher barrier of entry for fraud, since new Google accounts require phone number verification.
I'm a SRE so if you need ideas for the hosting/infrastructure side of things, feel free to ask!