About using third party login (using qq or Wechat)

when we register or bind, we will do the local user to associate with the openid of the third-party account.
with regard to the problem of logging in with a third-party account, it is certainly not secure if this API is designed to use only openId as a parameter, and the server backend uses openId to find the associated user,. When others know the openId, they can simulate the request to log in.
how can I prevent using other people"s openId to log in?

Mar.13,2021

third-party login will fill in an asynchronous callback address and pass some parameters. You only need to verify one of the specific parameters

.
Menu