Comments on The official Google Code blog: Making auth easier: OAuth 2.0 for Google APIs

Hello. Its possible to convert a google cookie-bas...

2011-12-12T03:06:28.945-08:00

Hello.
Its possible to convert a google cookie-based session to the oauth2 token?
If i have the session cookies, can i get the token?
Thanks!

@Andrew: I have a similar request as @srimonti. I ...

2011-11-30T15:53:08.014-08:00

@Andrew: I have a similar request as @srimonti. I just need to validate the user and give them access to our Hosted Domain apps resources, but without the whole confirm/approve process.

When will this be available through oAuth?

Thanks!

hiii i dont know where to post but i am posting he...

2011-09-16T07:56:35.085-07:00

hiii i dont know where to post but i am posting here please help ... when i try to create clientid by using redirect uris i am getting error of invalid. i am giving this uri

http://myserver/directory/gplus/

Is it possible to use OAuth 2.0 + OpenID for the h...

2011-05-08T09:26:27.722-07:00

Is it possible to use OAuth 2.0 + OpenID for the hybrid protocol?

From the request parameters and examples listed here http://code.google.com/apis/accounts/docs/OpenID.html#oauth, it seems the hybrid only supports OAuth 1.0. (openid.oauth.consumer expects consumer key, and there is no client_id)

Am I wrong? Please tell me I'm wrong.

@Andrew: any update on when oauth 2.0 will provide basic user info by default? All I need is something to uniquely identify the users logging in, doesn't even have to be access to user's email/username.

Is it possible to use OAuth 2.0 + OpenID for the h...

2011-05-08T07:24:15.522-07:00

How to I register an application to use Blogger Oa...

2011-05-03T17:43:20.724-07:00

How to I register an application to use Blogger Oauth2 api? Where is the url to register my application? The one I found here https://code.google.com/apis/console/
does not include Blogger as one of the available services.

omarenm, can you please make sure the client is re...

2011-04-28T13:54:18.573-07:00

omarenm, can you please make sure the client is registered as an "Installed application"?

Its not working for installed APP, if I set redire...

2011-04-21T09:09:11.901-07:00

Its not working for installed APP, if I set redirect_uri=urn:ietf:wg:oauth:2.0:oob i get a redirect mismacth error this happens when i set the same parameter in blank on the api console or when i put any url and it shows an error when i try to set it to urn:ietf:wg:oauth:2.0:oob

Speaking of a PHP library, it'd be nice if the...

2011-03-17T12:31:08.648-07:00

Speaking of a PHP library, it'd be nice if there were a simple sample open-source web app example, too.

@Andrew Is there an eta on the PHP library release...

2011-03-17T12:28:16.801-07:00

@Andrew
Is there an eta on the PHP library release?
Thanks sapper!

@Marius: thanks for the hint, but I need the stat...

2011-03-17T10:03:19.543-07:00

@Marius:

thanks for the hint, but I need the state in the URL of the login redirect on the client. It´s important for me to have a token with a hashmark so I can combine it with the GWT history mechanism. The GWT History mechanism checks the URL for #token. It works with facebook. My workaround is, that I check the URL for a "&code=" string and after that I check if there is a #oauth_facebook token in the URL. If there´s no facebook token, I just append a new #oauth_google token. After that my history mechanism can handle the rest. It´s a bit dirty, but it works ;) ... I hope I can find a better solution, but I think Google should allow the Hashmarks in the URLs because in my opinion it´s a reasonable way to handle the login with the history mechanism in ajax apps.

kind regards, Michael

@Jambi OAuth 2 provides a parameter called "...

2011-03-17T08:51:38.695-07:00

@Jambi

OAuth 2 provides a parameter called "state" that can be used to pass data to the server and back. Would that work for you?

I have another question: Is it somehow possible t...

2011-03-17T07:01:36.698-07:00

I have another question:

Is it somehow possible to pass a redirect URL which is qualified for a GWT History token? I basically need to pass a hashmark within the URL, but it doesn´t seem to work. Neither with the character "#" or with the encoded type "%23". It would be important for me since I have to handle the different codes I get from facebook or google.

kind regards, Michael

@Andrew Great news! How will it look like? Will t...

2011-03-17T01:48:10.361-07:00

@Andrew

Great news! How will it look like? Will there be a scope for basic user informations? I can´t wait ^.^

Any idea if this has any impact on 2-Legged OAuth?...

2011-03-16T22:46:26.312-07:00

Any idea if this has any impact on 2-Legged OAuth?

Hi, For native applications When use redirect_ur...

2011-03-16T17:04:23.280-07:00

Hi,

For native applications

When use redirect_uri:redirect_uri=urn:ietf:wg:2.0:oob, return exception invalid_request: Invalid parameter value for redirect_uri: Missing authority: urn:ietf:wg:2.0:oob

The correct thing redirect_uri=urn:ietf:wg:oauth:2.0:oob

It's a typo?

For server-side applications

I did a small example, see http://gooogl.heroku.com

Thanks for job!

@Nils Magnus: Take another look: http://code.goo...

2011-03-16T08:50:18.080-07:00

@Nils Magnus:

Take another look:

http://code.google.com/apis/accounts/docs/OAuth2.html#IA

And post in the forums if you've got questions about it!

@Matt and Jambi,

Today we're supporting OpenID for login, but we've heard your pain about mess of different identity protocols on the web. Stay tuned :)

@Matt: I want exactly the same thing that you wan...

2011-03-16T02:20:18.233-07:00

@Matt:

I want exactly the same thing that you want. But I think you are supposed to use OpenID right now. The problem is, that you get a lot of different login mechanisms because Twitter is using OAuth 1.0 (Or am I wrong?), Facebook is using OAuth 2.0 and Google is using OpenID for login. Please correct me if I´m wrong. So basically I have the same question.

Will Google support login for basic user informations with OAuth 2.0 for Google APIs?

I'm having an issue using the APIs. The exampl...

2011-03-15T18:41:44.705-07:00

I'm having an issue using the APIs. The examples show a request to access to the user's entire set of contacts. But I don't want that, I just want to know about the user.

I just want to allow people to login to my website google's oauth.

Can someone help by pointing to the documentation for the API of "just get basic information for a user"

What I want is
1. to ask the user just for permission to know basic information about them
2. an API to get that basic information

Then why doesn't Google support these kinds of...

2011-03-14T19:09:12.464-07:00

Then why doesn't Google support these kinds of "exciting" mashups? For example, why did Google Voice block iGoogle from accessing its mobile version in an iframe over a year ago and has yet to provide a different option?

Many people have to use older browsers to view our iGoogle pages properly. Google seems to have abandoned iGoogle.

A single page where we can view all of our inboxes and such is great but I guess Google don't get to shove as many ads in our faces that way. That's what it all comes down to, the all mighty dollar.

Sweeeeeet.

2011-03-14T15:12:35.748-07:00

Sweeeeeet.

Sweet! Looking forward to the docs for oauth 2.0 f...

2011-03-14T13:25:01.551-07:00

Sweet! Looking forward to the docs for oauth 2.0 for installed apps :)

No more OAuth signatures! Yay!

2011-03-14T12:34:47.045-07:00

No more OAuth signatures! Yay!

awesome, just when i needed it the most :) thanks!...

2011-03-14T11:52:22.831-07:00

awesome, just when i needed it the most :) thanks!

The current implementation is for version 10 of th...

2011-03-14T11:45:17.452-07:00

The current implementation is for version 10 of the OAuth 2 protocol:
http://tools.ietf.org/html/draft-ietf-oauth-v2-10

The specification is converging rapidly and we are committed to support the final version. Backward compatibility will be maintained.