Questions tagged [google-oauth]

Google APIs use the OAuth 2.0 protocol for authentication and authorization. Google supports common OAuth 2.0 scenarios such as those for web server, installed, and client-side applications. When posting questions, it is most helpful if you could explain who owns the resource that is to be accessed.

Google OAuth 2.0 is a relatively simple protocol. To begin, you obtain OAuth 2.0 credentials from the Google Developers Console. Then your client application requests an access token from the Google Authorization Server, extracts a token from the response, and sends the token to the Google API that you want to access.

References

Useful links

Unofficial support forums:

Google OAuth2 Google+ community

9703 questions
358
votes
20 answers

Refused to display in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'

I am developing a website that is supposed to be responsive so that people can access it from their phones. The site has got some secured parts that can be logged into using Google, Facebook, ...etc (OAuth). The server backend is developed using…
Ali Hmer
  • 4,841
  • 3
  • 20
  • 13
222
votes
5 answers

Why do access tokens expire?

I am just getting started working with Google API and OAuth2. When the client authorizes my app I am given a "refresh token" and a short lived "access token". Now every time the access token expires, I can POST my refresh token to Google and they…
levi
  • 23,693
  • 18
  • 59
  • 73
188
votes
12 answers

How can I verify a Google authentication API access token?

How can I verify a Google authentication access token? I need to somehow query Google and ask: Is [given access token] valid for the [example@example.com] Google account? Short version It's clear how an access token supplied through the Google…
Jon Cram
  • 16,609
  • 24
  • 76
  • 107
154
votes
10 answers

Google Authenticator available as a public service?

Is there public API for using the Google Authenticator (two factor authentication) on self-running (e.g. LAMP stack) web apps?
ohho
  • 50,879
  • 75
  • 256
  • 383
120
votes
6 answers

How to get list of downloaded apps (paid/free) by a user from Google Play?

I recently came across this app Purchase Apps, which is somehow able to retrieve apps I've paid for in google play after I signed in using my google account. I'm trying to find out how it is being done as I want to build a similar app, but for the…
vepzfe
  • 4,217
  • 5
  • 26
  • 46
107
votes
8 answers

Using Postman to access OAuth 2.0 Google APIs

I am trying to access Proximity Google API using Postman chrome app. I have followed tutorials on postman and google dev website but I'm still getting 401 error message. What am I doing? Step 1 - Enable Proximity API: In order to use Proximity…
Sai
  • 2,089
  • 3
  • 19
  • 30
101
votes
2 answers

How do I authorise an app (web or installed) without user intervention?

Let's say that I have a web app ("mydriveapp") that needs to access Drive files in a background service. It will either own the files it is accessing, or be run in a Google Account with which the owner has shared the documents. I understand that my…
pinoyyid
  • 21,499
  • 14
  • 64
  • 115
101
votes
6 answers

Restrict Login Email with Google OAuth2.0 to Specific Domain Name

I can't seem to find any documentation on how to restrict the login to my web application (which uses OAuth2.0 and Google APIs) to only accept authentication requests from users with an email on a specific domain name or set of domain names. I would…
paradox870
  • 2,152
  • 4
  • 20
  • 30
99
votes
16 answers

Where can I get Google developer key

I am working on Google API like chat, contacts and so on... I am stuck on developer_key as mentioned in gdata doc. You can get this at https://code.google.com/apis/console: 'developer_key' => '' I have already: // OAuth2 Settings, you can get these…
Neelesh
  • 1,458
  • 2
  • 13
  • 20
97
votes
26 answers

invalid_client in google oauth2

I try to make a web page for youtube video upload, therefore I try to get the client id from google api console, and in the api console it shows something like this: Client ID: 533832195920.apps.googleusercontent.com Redirect URIs:…
Bob
  • 981
  • 1
  • 6
  • 3
95
votes
15 answers

OAuth consent screen - ability to remove application logo

I added an application logo by mistake on the OAuth consent screen (URL: https://console.cloud.google.com/apis/credentials/consent), and now it says my consent screen requires verification by Google. Is there any way to remove the application logo…
Dipen Bhikadya
  • 3,318
  • 3
  • 21
  • 19
88
votes
18 answers

Google API authentication: Not valid origin for the client

When making an auth request to the Google API (gapi), it's returning false on the checkOrigin. I have removed any client id's or anything that would link directly to my account and replaced it with a regex indicating what the data is for…
88
votes
13 answers

Google OAuth API to get user's email address?

I am playing with Google's OAuth 2.0 Playground using my own personal Google account, but I cannot seem to recover my Gmail address using the playground. The scope I am using is: email profile https://www.googleapis.com/auth/plus.login But when I…
RevolutionTech
  • 1,334
  • 2
  • 14
  • 17
85
votes
3 answers

Delegate OpenID to Google (NOT Google Apps)

Is it possible to use my personal website/blog to login to sites that use openid, and delegating to my Google account? OK, I searched this question on SO but no good answer. After spent some time I figured out how to do it. I'm going to answer this…
Rio
  • 1,877
  • 3
  • 25
  • 25
77
votes
5 answers

Google OAUTH: The redirect URI in the request did not match a registered redirect URI

I am trying to make an upload to YouTube from my Java based web app, I spent a few days to understand what and where is the problem and I cannot get it, for now I am pulling my hair out off my head. I registered my web app in Google Console, so I…
1
2 3
99 100