Questions tagged [google-openid]

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

OpenID achieves this goal by providing a framework in which users can establish an account with an OpenID provider, such as Google, and use that account to sign into any web site that accepts OpenIDs. This page describes how to integrate Google's Federated Login for a web site or application.

Google supports the OpenID 2.0 protocol, providing authentication support as an OpenID provider. On request from a third-party site, Google authenticates users who are signing in with an existing Google account, and returns to the third-party site an identifier that the site can use to recognize the user. This identifier is consistent, enabling the third-party site to recognize the user across multiple sessions. Google also supports the following extensions:

457 questions
15
votes
3 answers

OpenID: is the identifier URL unique? what are the differences between the identifiers

In the OpenID specs, it says: Identifier: An Identifier is just a URL. The whole flow of the OpenID Authentication protocol is about proving that an End User is, owns, a URL. Claimed Identifier: An Identifier that the End User says they own,…
Albert
  • 65,406
  • 61
  • 242
  • 386
15
votes
4 answers

Basic Google Sign-In for Websites code not working in Internet Explorer 11

I am attempting to use Google Sign-In for Websites (https://developers.google.com/identity/sign-in/web/) and noticed that my solution is not working in Internet Explorer 11. To try to eliminate as many factors as possible, I created a simple test…
15
votes
1 answer

Difference between Google "OpenID Connect" and "sign-in with Google"?

I want users to my website to use Google Accounts to authenticate / sign in to my website. The primary use case being users will edit and generate content and we want to log ownership in a secure way. We are not interested in obtaining users…
samthebest
  • 30,803
  • 25
  • 102
  • 142
14
votes
1 answer

Need clarification on email_verified field of ID Token

I'm using Google's OpenID Connect service to authenticate users. I was considering rejecting all accounts if the email_verified field was false, but I don't see a real world scenario where someone will hit my system with this field set to false.…
jekennedy
  • 1,192
  • 10
  • 17
14
votes
1 answer

Spring Security and Google OpenID Connect migration

Questions: 1) What's the best way to integrate OpenID Connect authentication into a webapp that uses Spring Security for authentication? 2) Is there any way - either from the MITREid side of things or the Google Accounts side of things - to get the…
steve
  • 191
  • 1
  • 10
14
votes
1 answer

How to use the correct Google OpenID url to login to my site?

I am trying to implement OpenID as one preferred option to my next web app here The code is taken from this tutorial and works if I use my openID from myopenid.com However, I believe most people would just love to use their everyday email address as…
Michael Mao
  • 9,878
  • 23
  • 75
  • 91
11
votes
2 answers

Google Apps OpenID url

Problem: My organisation, ExampleFooBar, uses Google Apps. On our website I want to enable OpenID Single Sign-In (like StackOverflow), but only allow @examplefoobar.com email addresses to sign in. What OpenID url should I use for a Google…
aaronsnoswell
  • 6,051
  • 5
  • 47
  • 69
11
votes
2 answers

How or when to follow redirected OpenIDs?

I'm currently implementing OpenID authentication for a website. During testing, I've noticed that Google accepts different versions of claimed Google Profile IDs,…
sfussenegger
  • 35,575
  • 15
  • 95
  • 119
11
votes
2 answers

Obtain an id token in the Gmail add-on for a backend service authentication

The background I'm using the Google Apps Script to create a Gmail Add-on. Via this plugin, I would like to connect to my backend server (a non-Google service) using a REST service request. The request has to be authorised. When authorised, I could…
11
votes
2 answers

Google and Yahoo OpenID Endpoint

Are https://www.google.com/accounts/o8/id and https://me.yahoo.com are Google's and Yahoo's OpenID Endpoint or the URL's to which I must send the discovery request, which in response will have the OpenID Endpoints?
felix
  • 11,304
  • 13
  • 69
  • 95
10
votes
3 answers

You can't sign in from this screen because this app doesn't comply with Google's embedded webview Policy

I am working on an e-commerce website. Our website provides the option to signup using google account (using OAuth). Our website is responsive and can be accessed using mobile devices, however it is not embedded and we do not have any Andriod or iOS…
Hooman Bahreini
  • 14,480
  • 11
  • 70
  • 137
10
votes
1 answer

Setup Google OpenId Login

I'm having a hard time learning how to integrate Google OpenId support to my spring 3.1 web application (including Spring security 3.1). I've found some documentation and tutorials but it have not helped me enough. Like: Springsource openId…
nilsi
  • 10,351
  • 10
  • 67
  • 79
9
votes
0 answers

What causes "Incorrect token audience" using Google authentication tokens with AWS

I'm creating a simple web application that will use Google authentication to return an OpenID token, and then pass that token to AWS using javascript WebIdentityCredentials. What I have done: Created the Google Project, and saved the OAuth…
9
votes
4 answers

What does the Google public key endpoint return?

I am working with OpenID Connect in my application, i got the JWT token correctly from Google and I need to validate it using Signature. To achieve this i need the public key, Google provide an URL which contains all its public…
user2602584
  • 737
  • 2
  • 7
  • 25
9
votes
3 answers

How to implement Openid connect and Spring Security

I am beginner of authentication and authorization but I have to connect to a openid connect provider on my job. I know a little about how to use Spring Security. First, I got UserInfo object thanks by following nice…
zono
  • 8,366
  • 21
  • 75
  • 113
1
2
3
30 31