diff --git a/docs/backends/eveonline.rst b/docs/backends/eveonline.rst index 4b741203..b0b814df 100644 --- a/docs/backends/eveonline.rst +++ b/docs/backends/eveonline.rst @@ -35,4 +35,24 @@ The EVE Single Sign-On (SSO) works similar to GitHub (OAuth2). SOCIAL_AUTH_EVEONLINE_SCOPE = ['publicData'] +Character transfers +------------------- + +EVE characters can move between player accounts. This backend checks the +``CharacterOwnerHash`` returned by EVE SSO against the hash saved with an +existing ``CharacterID`` association. If the hashes differ, sign-in fails with +``identity_in_use``; the transferred character cannot access the previous +owner's local account. + +To let the new owner sign in, an administrator must verify the transfer and +remove the old social-auth association. The new owner can then sign in with the +character and create or link their own local account. Preserve access to any +other identities and data on the previous owner's local account when removing +the association. + +An older association without a saved ``owner_hash`` records the hash from its +next successful sign-in. Because that row has no evidence of the previous +owner, review such rows before relying on this backfill in sensitive +deployments. Sign-in fails if EVE SSO omits ``CharacterOwnerHash``. + .. _EVE Developers: https://developers.eveonline.com/