250908 Social Sign-on (Line, Facebook) data scope

📌 LINE Login Scopes

Scope	Data(EN)	Data(KR)	Justification (for review submission)
profile	User ID, display name	사용자 ID, 이름	We request the `profile` scope to identify the user and display their name and profile image in the service interface. This is essential for login and personalization.
openid	OpenID Connect ID token	앱/채널 단위 고유 식별자	We request the `openid` scope to securely authenticate users using the standard OpenID Connect protocol. This is necessary to verify the user’s identity on our platform.
email	Email address	이메일 주소	We request the `email` scope to create or link user accounts within our system and to provide account recovery and notification services. This ensures proper account management.
(Optional) profile+ (e.g., gender, birthdate, phone, address)	Additional personal information (e.g., gender, date of birth, phone number, postal address)	성별, 생일, 전화번호, 주소, 우편번호 등	We only request additional profile+ data if required by specific services, such as age verification for restricted content, or phone number for secure reservation confirmation. These are requested only when strictly necessary.

openid

“이 사람이 누구인지”를 판별할 방법이 없어 로그인 기능이 무의미해짐

**ID Token 예시**

{
  "iss": "<https://access.line.me>",
  "sub": "U1234567890abcdef1234567890abcdef",   // 사용자 고유 ID
  "aud": "1234567890",                        // 발급된 앱(Channel) ID
  "exp": 1504169092,                          // 토큰 만료 시각 (UNIX time)
  "iat": 1504165492,                          // 토큰 발급 시각 (UNIX time)
  "nonce": "09876-54321",                     // 요청 시 보낸 nonce (재생 공격 방지)
  "amr": ["pwd"],                             // 인증 수단 (예: password)
  "name": "Taro Line",                        // 사용자의 LINE 표시 이름 (profile scope 필요)
  "picture": "https://sample_line.me/aBcdefg12345.png",  // 프로필 이미지 URL (profile scope 필요)
  "email": "[email protected]"                 // 이메일 (email scope 필요)
}

📌 Facebook Login Scopes

Scope	Data(EN)	Data(KR)	Justification (for review submission)
public_profile (default)	User ID, name	사용자 ID, 이름	We request the `public_profile` scope to identify the user and display their basic profile information in our service.
email	Email address	이메일 주소	We request the `email` scope to create or link user accounts in our CRM, and to support account recovery and essential notifications.
(Optional) user_gender, user_birthday, user_friends	Gender, birthday, friend list	성별, 생일, 친구 리스트 등	We only request additional information if required for specific services (e.g., age verification or personalized recommendations). These scopes are requested only when strictly necessary and are accompanied by clear user consent.