oauth 2.0 - Google OpenId and Google APIs -
i trying achieve openid login google , acces token access google apis (such google plus, or drive)
the first attemp successful big problem:
- make openid stuff, , user redirected google identify himself, return app identified.
- make oauth stuff google apis, redirect user again identify himself , cameback code, exchange code access token needed call google apis.
the user needs identify twice. that's not good.
i read , tryed google hybrid openid , oauth. links there points deprecated oauth1 interface, , cant make work, user identified not request_token continue oauth stuff.
so have couple of questions:
- is there way identify user agains google openid , @ same time users consent access google apis?
- is hybrid protocol still working oauth2 , new google apis?
- i'm on way or im missing something?
i need both openid , oauth beacouse application needs in google marketplace , must login users openid, , need hit apis need oauth2 access_token.
thanks!
why need work on both openid , oauth side side, , have 2 login screens? if use oauth 2.0 workflow, user needs key in credentials once , can want to.
once user consents login/permissions screen in oauth workflow, app access token. if need client info for, say, welcome user screen - need hit https://www.googleapis.com/oauth2/v1/userinfo endpoint access token , give user's public information. so, in short can pretty of things oauth flow, , user logging in once.
good luck! feel free follow more questions.
Comments
Post a Comment