Questions tagged [google-openid]

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

OpenID achieves this goal by providing a framework in which users can establish an account with an OpenID provider, such as Google, and use that account to sign into any web site that accepts OpenIDs. This page describes how to integrate Google's Federated Login for a web site or application.

Google supports the OpenID 2.0 protocol, providing authentication support as an OpenID provider. On request from a third-party site, Google authenticates users who are signing in with an existing Google account, and returns to the third-party site an identifier that the site can use to recognize the user. This identifier is consistent, enabling the third-party site to recognize the user across multiple sessions. Google also supports the following extensions:

457 questions
0
votes
1 answer

DotNetOpenAuth - Google Apps OpenID login failed, x is not a secure Identifier

We are testing an OpenID DotNetOpenAuth ASP.Net website on a subdomain named like test.xyz.com, and both http and https are enabled. We also enabled "requireSSL". We are getting this error when we try it with the Google Apps OpenID endpoint: Login…
Malartre
  • 1,511
  • 18
  • 28
0
votes
1 answer

How to use access_token to query gmail api

I have a web application where the user, after logging into our system, can go to a page to authorize gmail access going through the whole OAuth process with google. The process completes with me receiving the access_token and refresh_token and…
geoff swartz
  • 5,437
  • 11
  • 51
  • 75
0
votes
1 answer

How to redirect user back to my app when doing Auth0/Google federated SSO logout?

Context: I am implementing a Single-Page-Application using Auth0's implementation of OpenID Connect Single Sign-On with Google as my identity provider. Browser is Chrome v59 auth0.logout() below refers to the auth0-js library which is included in…
Shorn
  • 19,077
  • 15
  • 90
  • 168
0
votes
0 answers

google signin force password prompt

Google deprecated the use of embedded webviews for authentication with Google Signin in devices like iOS and Android. Android supports Kiosk mode. The concept of having numerous users share a single android device is not foreign. iOS is also…
0
votes
1 answer

How to generate an OpenID shared secret for a MAC key?

Basically, my understanding of the process so far is that I choose a modulus (p), a generator (g), and a random private key (xa) that is between 1 and p-1, inclusive. The provider chooses a random private key (xb). The shared secret is g ^ (xa * xb)…
Paddy
  • 2,793
  • 1
  • 22
  • 27
0
votes
2 answers

Google oauth2 migration issue, missing openid_id

I noticed that since recently my "login with Google" script doesn't work correctly anymore. After some debugging it seems that the main value openid_id is not being returned anymore. I am correctly receiving access_token id_token iss iat exp at_hash…
Mr.Boon
  • 2,024
  • 7
  • 35
  • 48
0
votes
1 answer

Getting values from the query string using Janrain's PHP OpenID library

I am using Janrains PHP openID library. All is working perfectly except when I try and pull values from the query string on the script that is returned to after the user is authorized. Here is the first part of the query…
Rory
  • 1,805
  • 7
  • 31
  • 45
0
votes
1 answer

Google OAuth2 Validate access token in Server Flow

I'm manually writing OAuth2 Server Flow to allow users to login using Google (and other websites, but let's focus on Google). I have the basic flow working: user clicks on the login link. goes to Google and sees consent screen. accepts. redirected…
Itai Bar-Haim
  • 1,686
  • 16
  • 40
0
votes
1 answer

getservbyname failure error while trying to obtain thumbprint for OIDC

Im trying to obtain the certificate for my OIDC IdP (google in my case) and want to download the certificate chain. I have installed and configured OpenSSL and retrieved the IdP's configuration document, using the…
JustDebuggin
  • 358
  • 5
  • 19
0
votes
1 answer

Is Stackoverflow's social auth mechanism (say I sign in with my Google account) built on top of OpenID Connect?

I am constantly get confused by OpenID Connect and Oauth2, and I read this article and get a sense that Google is using OpenID Connect https://auth0.com/docs/oauth-web-protocol (but I remember google used Oauth2 as providing auth service to 3rd…
chen
  • 4,302
  • 6
  • 41
  • 70
0
votes
2 answers

How to use Google's OpenID connect provider with CORS?

I've written a JavaScript app to use Google's OpenID-Connect provider for authentication. I've registered the app at Google's developer console. I'm using the oidc-client-js library to handle the interactions with Google and also passed my app's…
0
votes
1 answer

Prompting re-consent while signing in with OpenID Connect

I am facing a problem that each time user logs in with OpenID Connect, user is presented with consent screen (scope authorization screen). When I read the documentation it says You can prompt the user to re-authorize your app by adding the …
Bharat Dodeja
  • 1,137
  • 16
  • 22
0
votes
1 answer

Any login (openid,google etc.) which supports restricted user access?

Have been searching but cannot find any openid/google/facebook/twitter login which supports restricted user access ? What I would like to achieve is to have a sign-on via popular social login but restrict access to a few users. I would like to…
sunny
  • 824
  • 1
  • 14
  • 36
0
votes
1 answer

Freshness and single-use of an id_token

Can anybody help me...? I would like to use Google sign-in as a login in my App. As I need a proper authentication of my users in front my server, I need to verify the freshness and the single-use of the id_token. In other words, the id_token…
0
votes
1 answer

OpenID 2.0 Support Turndown also for other openId providers?

I'm using appengine/Java. I'm aware Google dropped its support as OpenId Provider. Thefore, I migrated to OpenID connect for my Sign-in with Google, using following…
peternees
  • 170
  • 1
  • 15