OpenID or oAuth2

[Jonathan]

I want to use google for authentication on my site, and was wondering if there are any advantages to using the OpenID class in F3 as compared to integrating google's Oauth2Service code? I have started down the road of Oauth2, because I haven't been able to figure out the OpenID way withing a reasonable time.

Also, if someone has an example of how to leverage F3 OpenID for google auth (or facebook, etc), that would be very helpful.

thanks

[ikkez]

hi Jonathan,

you can find examples about any portion of the framework in the unit tests in the dev-branch

openid request to google:
https://github.com/bcosca/fatfree/blob/dev/app/openid.php
redirect from google and verification:
https://github.com/bcosca/fatfree/blob/dev/app/openid2.php

[Jonathan]

Thanks so much. I have been looking in the wrong place for examples - did not see the dev branch (I have used github much yet).

This looks promising now!

[Jonathan]

Obviously I have never use google groups before either! :)

[Jonathan]

Is there a way to skip or bypass the google auth screen if the user has already approved the application previously? This can be done with Oauth2 with "auto", but what about OpenID?

[ikkez]

hm, i'm not sure what's wrong, but when i run the unit test, and log into google, i do not get the auth screen a 2nd time when refreshing the original auth-login page... so everything works fine here.

[bcosca]

Make sure you choose to stay signed in.

[Jonathan]

I'm referring to the authorization screen, not authentication. e.g.; requesting permission to access email, profile, etc...

[Jonathan]

Just wanted to respond to this to clear things up. It was a configuration on my side that caused the authorization prompt every time. The OpenID provider works fine, and doesn't prompt for authorization each time now. Thanks for your responses.