https://roxl.net/blog Automating. Saving time. Making the world better. en-us therawlex@gmail.com (Artem Krivoshchekov) therawlex@gmail.com (Artem Krivoshchekov) Sat, 08 Aug 2026 00:00:00 GMT https://roxl.net/blog/cybersecurity/social-login-duplicate-accounts-race-condition https://roxl.net/blog/cybersecurity/social-login-duplicate-accounts-race-condition An OAuth callback can fire twice for one sign-in, and a naive handler creates two accounts for one person. Here is why it happens, why checking for an existing user does not fix it, and how claiming the auth code in a lock table does. Sat, 08 Aug 2026 00:00:00 GMT therawlex@gmail.com (Artem Krivoshchekov) wordpressoauthopenidauthenticationwoocommercerace-condition