Status of GIT?

[Shawn]

It's been over 1.5 years since the last post in this group.

What's the status of the Google Identity Toolkit project?

Should I still use it for new applications?

Is OpenId-Connect, or something else supposed to replace this?

Thanks

[Jack Greenberg]

Hi Shawn,

We are indeed still around and working on a version 3 of Google Identity Toolkit. You can find more details and request a trusted tester invitation here: https://developers.google.com/identity-toolkit/v3/index

The new version aims to help sites that want to migrate smoothly from primarily or completely password users to primarily federated login users.

Also coming is support for native iOS/Android apps and what we call non-email identity providers. For mobile we will be providing libraries that connect your Identity Toolkit-enabled website to your native apps, while hopefully avoiding sending users to the mobile browser. For non-email identity providers we are still in the process of deciding which services will be supported, but these are identity providers like Google+, Facebook, Amazon, LinkedIn, etc. which support users with any email address.

As far as a new application, let us know if v3 is something that might be interesting for you even though it is not a completely finished product. If you only need Google Sign-In, we'd recommend looking at Google+ Sign-In as one option (pre-made widgets) and Google's implementation of OpenID Connect-compliant OAuth2 endpoints as the other (you will likely need to do more coding, but there are nice libraries to help). Companies like Janrain, Gigya, Microsoft, and Ping Identity offer similar services to our toolkit and may also be useful. If none of those are good options for you, you could still use the older versions, but keep in mind that they sometimes use older technology. For instance, OpenID and OAuth1 are generally being replaced by OAuth2.

Regards,

Jack Greenberg
Associate Product Manager
Google

[Shawn]

Jack, it's great to hear the project is still alive and well!

I'm looking towards building apps (both desktop and mobile) that preferably use only modern (oauth2/openid-connect) federated login. Avoiding sending users to the mobile browser to do a traditional web flow would be great. From what I've seen to date, attempting oauth2/openid connect from a Cordova app is quite messy, especially considering these mobile platforms already have native support for some identity providers.

I'm also experimenting with the MCA (Mobile Chrome Apps) project which has some support for ios/android login on mobile... will identity-toolkit be leveraging that or are they entirely separate projects?

Regarding Google+ Signin, it seems like a great, straightforward solution, but only for desktop experience. I tried (mostly unsuccessfully) to bend it into a Cordova app.

I submitted the form for V3 testing - look forward to helping develop this sort of app easier.

[Jack Greenberg]

(bcc-ing the announce list and moving this to the discussion list. We'll trying to reserve the announce list for low-volume official announcements about new releases and updates)

Hi Shawn,

I haven't tested identity toolkit with Cordova specifically, but if it is just taking web-style code (html/js/css) and displaying it inside of an app, there shouldn't be any issues with identity toolkit. There may be some tweaking to the widgets to make them fit with your mobile style, but functionally I don't imagine any issues. Let's get you hooked up to the trusted tester versions, so we can be sure to hear from you if there are any issues.

Anyone else wanting to try out version 3 with Google+ support and native iOS/Android SDKs feel free to shoot me an email!

Best,

Jack

--
You received this message because you are subscribed to the Google Groups "Google Identity Toolkit Announcement" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-identity-toolki...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[Shawn]

Excellent, so the web docs (https://developers.google.com/identity-toolkit/v3/) is what to watch?

...and I should ignore the old google docs at this point (and also stop commenting/suggesting therein)?

[Shawn]

Wow, I hit reply and it associated my response to the wrong post. That's a bug.