Questions tagged [google-openid]

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

OpenID achieves this goal by providing a framework in which users can establish an account with an OpenID provider, such as Google, and use that account to sign into any web site that accepts OpenIDs. This page describes how to integrate Google's Federated Login for a web site or application.

Google supports the OpenID 2.0 protocol, providing authentication support as an OpenID provider. On request from a third-party site, Google authenticates users who are signing in with an existing Google account, and returns to the third-party site an identifier that the site can use to recognize the user. This identifier is consistent, enabling the third-party site to recognize the user across multiple sessions. Google also supports the following extensions:

457 questions
9
votes
2 answers

Google OpenId: No OpenID endpoint found (intermittent)

Usually using the Google OpenId works fine, thousands of times a day, then it will start intermittently going wrong and timing out for an hours or so (some requests will validate but not all). Repeated validation will eventually work. Error messages…
Ben Adams
  • 3,281
  • 23
  • 26
8
votes
2 answers

Google oauth - Restrict sign-in to a particular google group

Is it possible to restrict login to my web application only the accounts that are in a google group ? I don't want everyone can just login with their private gmail but only the users who are in my google group.
mohamed haleem
  • 187
  • 1
  • 10
8
votes
2 answers

Android Google Sign In fails with error code 8 (no message)

I am trying to integrate Google Sign in to my application, but I get errors that I cannot understand. I have configured everything according to the tutorial here, but it would not authenticate me. I am presented with the login panel that shows my…
jmc34
  • 810
  • 3
  • 10
  • 22
8
votes
6 answers

How do I validate an access token using the at_hash claim of an id token?

Say I have the following response from Google's OAuth2 /token endpoint after exchanging the code obtained from the /auth endpoint (using this example OAuth Playground request): { "access_token":…
William Denniss
  • 16,089
  • 7
  • 81
  • 124
8
votes
1 answer

Migrating from Google OpenID 2.0 to OpenID Connect with different redirect_uri and openid.realm parameters

I am migrating from Google OpenID 2.0 to OpenID Connect. I am currently using Microsofts ACS which uses Googles depreciated OpenID 2.0 for authentication. This means my realm was automatically set to…
brocknz
  • 226
  • 2
  • 7
8
votes
1 answer

How to migrate OpenID to OAuth in asp.net mvc4

I am using asp.net mvc 4 template, which ships with OpenID2 as default. Since google has depricated OpenID 2.0, I want to use OAuth 2.0. I checked all MSN blogs where there is no solution for out of box. I am using visual studio 2012 and mvc 4…
8
votes
4 answers

Authentication on Google App Engine (web page)

I would like to require the user to use a login/password when accessing some parts of my GAE (Google App Engine) application. I want to limit the access to the set of predefined users, e.g. on the page, where new data can be uploaded to the…
STeN
  • 6,262
  • 22
  • 80
  • 125
7
votes
3 answers

How stackoverflow accomplish login via Gmail?

I want to know how stackoverflow.com enables login via my Gmail Account. Is there any arrangment between the two companies? Or its just an api ? Does Gmail send information to Stack Overflow? Where can I find the API?
Royi Namir
  • 144,742
  • 138
  • 468
  • 792
7
votes
1 answer

Should I be encrypting OpenID's in my database?

I am storing OpenIDs into a database so I can log in users very quickly. Should I be encrypting them in my database? An alternative question would be, are they considered 'sensitive' information?
Peanut
  • 2,126
  • 4
  • 25
  • 38
7
votes
3 answers

Is it possible to use google authentication (i.e. service account) for custom API?

So we're building a RESTful service on google cloud running on GCE instances. This service is going to be consumed internally, i.e. web servers. I'm thinking about securing this service using Oauth. Instead of maintaining our own database of…
7
votes
1 answer

How to access the Avatar from Google?

I've implemented OpenID-Login with Google. I can access the following attribute types 'contact/email', 'namePerson/first', 'namePerson/last' and 'pref/lang'. But I also wanna have the Google Account image/avatar. Concerning to the specs from…
Oliver
  • 236
  • 1
  • 7
7
votes
2 answers

What is my google-signin-client_id

My web site used to have a link to let users login with their Google accounts in Open ID 2.0. Since 20.4.2015, this is no longer working, so I am trying to migrate to Google Sign-In. This…
Erel Segal-Halevi
  • 33,955
  • 36
  • 114
  • 183
7
votes
2 answers

Will the login functionality built into the Users API stop working on April 20th?

I am currently using the Users API (this one here) with the Go language on my Google App Engine application. My users are getting the warning message when they first grant permissions that says "OpenID 2.0 for Google accounts is going away.…
Blair Connolly
  • 584
  • 2
  • 7
  • 21
7
votes
1 answer

How to migrate an MVC 4 OpenId Google Login to OAuth 2.0 or Google+ Sign-in

I have an MVC 4 web application that is currently using the out-of-the-box OpenId Google Login. This has been deprecated by Google and so, I need to migrate this to one of Google's supported methods. I have read the documentation provided by…
7
votes
3 answers

Do third-party logins work inside an iframe?

I would like to build a simple web application and let partners embed it within their sites. I intend to let the partners embed it using an iframe, much like youtube: The app would require login via third-party authentication providers (e.g.…
Adam Matan
  • 128,757
  • 147
  • 397
  • 562
1 2
3
30 31