Questions tagged [google-openidconnect]

28 questions
1
vote
0 answers

High latencies against https://oauth2.googleapis.com/token endpoint with auth_code flow

We are exstensively using Google Open ID Connect on our infrastructure for more than year and it worked well so far. From yesterday we started expieriencing slow responses from https://oauth2.googleapis.com/token (pure round trip with DNS…
bplotka
  • 131
  • 1
  • 7
1
vote
2 answers

Asking for User Name or Unique Identity before OAUTH/OpenID-Connect

I am building a website that uses OAuth2.0 and OpenId-Connect (of some third party vendor) to authenticate user. Before redirecting the user to the vendor's OAuth page, I am not asking the user to enter a unique UserID on my website, I was…
Pharaoh
  • 712
  • 1
  • 9
  • 33
1
vote
1 answer

Open ID connect for native applications, i need get a valid ID token without prompting the user after the initial authorization?

I'm using the system browser for authentication. Identity Provider - Google Steps 1 - user gets authorized by entering user name and password. I get the authentication_code at this point. 2 - I call the token end point and get access token, id…
theNoob
  • 173
  • 1
  • 9
0
votes
0 answers

nginx plus (ingress controller )return ERR_TOO_MANY_REDIRECT after been authentifacted to okta

hello excuse my english i deployed an ingress controller in kub using nginx plus as an image i configured the policy part with spec: oidc: authEndpoint: https://xxxxx/oauth2/v1/authorize clientID: xxxx clientSecret: oidc-secret …
0
votes
0 answers

Google openid does not ask for consent

i was looking at a website that can identify users using google openId , so i login using google , the website got my google profil photo, name and email but the consent form from google did not show up, how is that possible ?
0
votes
1 answer

How sensitive is the Google OpenID Discovery Document to change?

What I am trying to do I am trying to implement Google OpenID Connect as a means to login to an ASP.NET Core 3.1 website using Google's instructions: https://developers.google.com/identity/protocols/oauth2/openid-connect#server-flow Under step 2 of…
0
votes
1 answer

ASP.NET Core Authentication via Google Sign In with REST API in between

I have a requirement to authenticate ASP.NET Core App via Google Sign In, but a Web API between client app (i.e. ASP.NET Core app) and Google sign in... I know it sounds confusing, so let me explain it with diagrams. Here is the typical way to…
0
votes
2 answers

What should be replaced with 'plus.me' scope on G Suite Marketplace?

Until currently we have used plus.me (https://www.googleapis.com/auth/plus.me) scope for OpenID Connect on G Suite Marketplace.But 'plus.me' scope will discontinue with Google+ API shutdown. Google Sign-in(And Google OpenID Connect) replace to…
0
votes
0 answers

Invalid grant_type and invalid credentials in OAuth 2.0 for Server to Server Applications for Google Drive

After performing all the steps mentioned in: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and making the access token request using postman: https://www.googleapis.com/oauth2/v4/token I received the following error: "error":…
0
votes
1 answer

Why Azure AD B2C creates user for Gmail users or other openid connect users?

I am using Azure B2C to connect my own openid connect server using OpenID onnect (Preview) provider. I configured every thing, system is working fine. But one thing is when a new user logs in through my own openid connect server, Azure AD B2C…
0
votes
1 answer

Google Oauth2 Prevent duplicate email address?

I created a website for an organization where users can log in with there gsuite accounts from google, let say, user john logged in using john@doe.com, and do his todos.now imagine user john left an organization and another new user called john,…
Hari
  • 1,545
  • 1
  • 22
  • 45
0
votes
1 answer

How to Generate AccessToken for user who is logged in with External Providers

I have an API implemented by asp.net core. I've used OpenIddict to generate access token and refresh token for users who registered to my api by email and password. I've added Google middleware (.UseGoogleAuthentication ... ) to my API and I can…
0
votes
0 answers

google signin force password prompt

Google deprecated the use of embedded webviews for authentication with Google Signin in devices like iOS and Android. Android supports Kiosk mode. The concept of having numerous users share a single android device is not foreign. iOS is also…
1
2