freckle/yesod-auth-oauth2

Google switched from OAuth2 to OpenID Connect

Closed this issue · 3 comments

Drezil commented

https://openid.net/connect/

in particular https://developers.google.com/identity/protocols/OpenIDConnect#authenticatingtheuser has changed.

Should this be patched or another project be started complying to OpenIdConnect-Standards?

pbrisbin commented

Hmm. I'd imagine Yesod.Auth.OpenId would work for authentication via Google OpenId and we'd just remove this module from here if it's no longer useful.

  • 👍1
Drezil commented

I doubt, that that will work, but i will try it out.

I found a page describing how to update "old" OAuth2-Stuff:
https://developers.google.com/+/web/api/rest/auth-migration#update-oauth-20-login-or-migrate-to-google-sign-in

afais it is just changing the endpoints and scopes and the rest still works.

This will no longer use the "old" OAuth2-Endpoint, but use "Google+" for authentication (which should be the same database, as far as i can see).

I will try this out later and send you a pull-request, if that works.

pbrisbin commented

I just tested the Google Login via #101, and it's working fine. Do you have any more information about this? This Issue has stagnated open for a while, and things are working when I test them, so I'm inclined to close it.