Questions tagged [google-openid]

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

Third-party websites and applications can now let visitors sign in using their Google user accounts. Federated Login, based on the OpenID standard, frees users from having to set up separate login accounts for different web sites and frees web site developers from the task of implementing login authentication measures.

OpenID achieves this goal by providing a framework in which users can establish an account with an OpenID provider, such as Google, and use that account to sign into any web site that accepts OpenIDs. This page describes how to integrate Google's Federated Login for a web site or application.

Google supports the OpenID 2.0 protocol, providing authentication support as an OpenID provider. On request from a third-party site, Google authenticates users who are signing in with an existing Google account, and returns to the third-party site an identifier that the site can use to recognize the user. This identifier is consistent, enabling the third-party site to recognize the user across multiple sessions. Google also supports the following extensions:

457 questions
5
votes
1 answer

Is all I need the "identity url"? - OpenID

I'm just wondering if all I need is the identity url in order to to theoretically attach an OpenID account to a user's account. I have identity urls that look like the following:…
RadiantHex
  • 24,907
  • 47
  • 148
  • 244
5
votes
1 answer

Prompt user to enter password - Google OpenID Connect

We are trying to use Google's OpenID Connect for a business web app but are concerned that the user will leave the app open and an unauthorized user will sign-in because the user is still signed into Google so OpenID Connect just let's them right…
artooro
  • 1,479
  • 1
  • 8
  • 20
5
votes
1 answer

Google OpenId Connect migration: getting the openid_id in ASP.NET app

I've gone through plenty of Google documentation and SO Q/A's but with no luck. I wonder if anyone has yet succesfully used the OpenId to OpenId Connect migration as advised by Google. This is what we used to do: IAuthenticationResponse response =…
mikkark
  • 135
  • 9
5
votes
1 answer

django-allauth google integration gives "Social Network Login Failure" error

I am working on an external site to integrate django-allauth for facebook and google login. Facebook worked almost out of the box. However, with Google I get the "Social Network Login Failure" error. Here is what I have done: 1.Google APIs console:…
zaphod
  • 2,045
  • 1
  • 14
  • 18
4
votes
2 answers

How do I identify OpenID username when identifier has no username in it?

I am trying to implement openID on my site and read through like Plaxo and questions on SO. I am currently able to authenticate my users using the libraries. But I notice that some providers like Google :…
Abdel Raoof Olakara
  • 19,223
  • 11
  • 88
  • 133
4
votes
2 answers

Can I get a consistent 'iss' value for a Google OpenIDConnect id_token?

I'm using Google's OpenIDConnect authentication, and I want to validate the JWT id_token returned from Google. However, the documentation seems inconsistent about what value Google returns for the iss (issuer) claim in the ID token. One page says,…
4
votes
1 answer

GoogleUser.signIn is not a Function

Dude, Where's My Function? Trying to call GoogleUser.signIn() results in TypeError: user.signIn is not a function Goal I want to refresh expired credentials (in a single page app) after the user has put their computer to sleep. I've already…
Waylon Flinn
  • 19,969
  • 15
  • 70
  • 72
4
votes
1 answer

DotNetOpenAuth and Google OpenID implementation

It's a relatively well-known fact that Googles' OpenID Provider does not provide (no pun) username and various other properties, as well as that it generates really ugly claimed identifiers. However, in a recent Hanselminutes episode (at arount 21…
Anton Gogolev
  • 113,561
  • 39
  • 200
  • 288
4
votes
1 answer

OpenID Autologin Janrain Example in php

I want my website to automatically detect if a user is logged into google. If they are, it checks the database to see if they are already registered. If they are registered, it logs them in to my site. Otherwise, it redirects them to the login…
Rob McCann
  • 41
  • 3
4
votes
1 answer

Do OpenID Connect Providers encrypt then sign their JWTs?

My team is making an existing product an OpenID Connect RP (relying party) and are using connect2id's Nimbus JOSE + JWT library. That library supports signed and encrypted JWTs, but only signed first, then encrypted. They have their reasons for not…
Michael
  • 347
  • 2
  • 13
4
votes
1 answer

How do I migrate users from OpenID to Google OAuth2/OpenID Connect using Python Social Auth?

Google is deprecating the OpenID endpoint I was using (v1.0 I think, via the django_openid_auth module) and I need to update my app and migrate my users' accounts to use Google OAuth2. I've changed the app to use python-social-auth and have it…
Tom
  • 42,844
  • 35
  • 95
  • 101
4
votes
1 answer

Google OAuth2 for an web application hosted behind NAT (intranet server without public IP)

My web application needs access to users Google data. I decided to use OAuth2. Problem is that Google does not accept my redirect_uri. It is the local IP address of my server on the intranet. In the past I have used OpenID, which accepted the local…
Witek
  • 6,160
  • 7
  • 43
  • 63
4
votes
1 answer

Can you use OpenID Connect without obtaining OAuth credentials?

In Google's OpenID Migration Guide, for transitioning from OpenID 2.0 to OpenID Connect, step 1 is that I need to obtain OAuth credentials for my application. One thing I like about "regular" OpenID is that I can allow my users to authenticate from…
sffc
  • 6,186
  • 3
  • 44
  • 68
4
votes
1 answer

Google OAuth2 API JWS conformance

Google currently exposes, at https://www.googleapis.com/oauth2/v2/certs, the following certificate values { "keys": [ { "kty": "RSA", "alg": "RS256", "use": "sig", "kid": "90adc60c0f9f503265a5ebc2c404c88e59882083", "n":…
Martin v. Löwis
  • 124,830
  • 17
  • 198
  • 235
4
votes
3 answers

Cannot authenticate anymore with new Google OAuth 2.0 token endpoint (v3)

I have a bunch of tests using Google Accounts as Identity Provider with OAuth 2.0 that are failing since 5th of december with an error around the expires_in field of the access token response that is no more a JSON Number but a String (I'm using…
Guillaume
  • 47
  • 4