Stack Overflow
Stack Overflow

Questions tagged [google-openid]

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

OpenID achieves this goal by providing a framework in which users can establish an account with an OpenID provider, such as Google, and use that account to sign into any web site that accepts OpenIDs. This page describes how to integrate Google's Federated Login for a web site or application.

Google supports the OpenID 2.0 protocol, providing authentication support as an OpenID provider. On request from a third-party site, Google authenticates users who are signing in with an existing Google account, and returns to the third-party site an identifier that the site can use to recognize the user. This identifier is consistent, enabling the third-party site to recognize the user across multiple sessions. Google also supports the following extensions:

457 questions
7
votes
1 answer

Google OpenID provider consistently fails on Azure

I'm trying to use Google OpenID with an MVC 4 app hosted on Azure & it keeps failing. Not straight away though. When I deploy the app, it all works perfectly time after time. I then leave it for some amount of time, usually a day, but could be an…
Simon Halsey
  • 5,459
  • 1
  • 21
  • 32
7
votes
2 answers

Google OpenID: the page you requested is invalid

I'm writing a Relying Party, and use the Google provider. Yadis leads me to https://www.google.com/accounts/o8/ud, I create an association, and redirect the user's browser to that URL (HTTP 307), and fill in the following query…
Martin v. Löwis
  • 124,830
  • 17
  • 198
  • 235
6
votes
1 answer

Why does Google OAuth API requires client_secret for the device flow? Is it safe to store the secret in an app that can be downloaded?

RFC 8628 doesn't state that the client_secret parameter is needed for Device Access Token Request: https://datatracker.ietf.org/doc/html/rfc8628#section-3.4 When I do such a request using Google API $ curl --request POST \ --url…
mvlabat
  • 577
  • 4
  • 17
6
votes
2 answers

How to get the Google user ID (email) when using Google Account OAuth API

I am new to OAuth, and want to get the user ID (an email address) from Google using OAuth. But I don't want to get the user's Google Contacts Information.
user809487
6
votes
2 answers

What could cause a correlation cookie to not be returned on specific devices

We have some users who cannot connect to our platform via Google. When this happens, it's always for a specific device, but with the information we have so far, it's not all the same device kind (to be confirmed). We're using ASP.NET Core (and…
Martin Plante
  • 4,553
  • 3
  • 33
  • 45
6
votes
1 answer

Self-Issued OpenID Provider vs OpenID Provider

To make it short: How exactly does an "Self-Issued OpenID Provider" differentiate from a “normal OpenID Provider” (lets say google) ? I read the specification which just says : "OpenID Connect supports Self-Issued OpenID Providers - personal,…
Marcel
  • 78
  • 5
6
votes
1 answer

Google signin not working in safari private mode

I've included Google signin in my webapp using this docs but when I try to load the site from Safari in private mode I always get following error in console QuotaExceededError: DOM Exception 22: An attempt was made to add something to storage that…
GUL
  • 1,175
  • 1
  • 13
  • 22
6
votes
1 answer

How can I reliably link to a Gmail conversation given a thread ID if the user is logged into multiple accounts?

If you're logged into multiple Gmail accounts, Google changes the URLs to reference which account you're currently using. For example: https://mail.google.com/mail/u/0/#inbox/138d85da096d2126 for a convo in my primary account…
NudeCanalTroll
  • 2,266
  • 2
  • 19
  • 43
6
votes
1 answer

Migrating Google OpenID to OpenID Connect: openid_id does not match

I have begun the process of Migrating from Google OpenID to the OpenID Connect with OAuth 2.0 following what is presented in the Documentation. I am able successfully complete the workflow of retrieving the openid_id and sub inside the id_token…
kkychuck
  • 93
  • 5
5
votes
1 answer

Google OpenID - how to use checkid_immediate in javascript?

With openid.mode=checkid_setup I can open a popup window and if the user is not logged in he will enter his credentials. But if he is already logged in (browser cookie), then the popup will appear and close right away. Before opening the popup I…
Yaron Levi
  • 12,535
  • 16
  • 69
  • 118
5
votes
1 answer

Force Google OAuth to request a username/password when authenticating a user

When I try to authenticate a user through Google OAuth 1.0, if the user is already logged in with Google, he's automatically asked if he'd like to allow access to my application. I would like to force the user into submitting his/her credentials…
George
  • 479
  • 3
  • 19
5
votes
2 answers

Android authentication to google accounts passed on to Google App Engine

Before I dig into the details of implementing this particular design, I wanted some advice/validation on whether I was approaching it correctly. I have a beginners knowledge of Android, advanced beginner in Python, GAE, and…
Erds
  • 513
  • 5
  • 16
5
votes
1 answer

Is facebook an openid provider?

I'm confused about facebook and whether or not facebook is an openid provider like google. According to this link: http://developers.facebook.com/blog/post/246/, facebook is an openid relying party. What does that mean, and is that different from…
oshirowanen
  • 15,297
  • 82
  • 198
  • 350
5
votes
0 answers

Is google still honoring the "max_age" request parameter in requests to https://accounts.google.com/o/oauth2/auth?

According to OIDC specs when an authentication request contains the max_age field the ID Token returned MUST include an auth_time Claim Value Starting January 28, we don't see the auth_time field returned in the ID Token returned from the google…
Iacopo Pace
  • 117
  • 1
  • 8
5
votes
1 answer

JHipster Social Login Google Authentication error Cannot POST /signin/google

Created an application from https://start.jhipster.tech/#/generate-application with JWT and Enabling Social Login, From Google generated the clientID, clientSecret and update the application.yml . In google console's Client ID for Web…
Raj
  • 747
  • 1
  • 9
  • 19
1 2 3
…
30 31