What should the API return if more than one device identifier is sent and they don't belong to the same device?

camaraproject / DeviceStatus

Repository to describe, develop, document and test the Device Status API family

Apache License 2.0

11 stars 31 forks source link

What should the API return if more than one device identifier is sent and they don't belong to the same device? #130

Closed fernandopradocabrillo closed 2 months ago

fernandopradocabrillo commented 3 months ago

What should the API return if, for example, the client sends in the request body a phoneNumber and a networkAccessIdentifier that don't belong to the same device?

With the current implementation I'm thinking about a 400 INVALID_ARGUMENT. Should we have an specific error? DEVICE_IDENTIFIER_MISMATCH or something like that?

what do you think?

nickvenezia commented 3 months ago

"Timestamp - Device Identifier - Last Seen" "Timestamp - Device Identifier - First Seen"

This would help a mobile game developer keep the user profile in-sync across devices is added to that user gamer profile.

When mismatch developer can trigger an authorization flow.

bigludo7 commented 3 months ago

@fernandopradocabrillo We discussed this point here: https://github.com/camaraproject/Commonalities/issues/127

Looking for feedback ;)

fernandopradocabrillo commented 2 months ago

closing since it is being discussed in commonalities