in reply to Re^2: login with google account
in thread login with google account

I'm wary of having to keep up with a third party and their changes to the account provisioning. If we allow creating users from Google accounts, the shadow accounts we create locally can always be switched back to "use password" once Google login breaks, but I'm not sure if/how Google users can then be reached.

If we can get the Google user email, they can always recover their password once authentication through Google breaks.

So, I don't think anymore that this will create a long-standing maintenance burden, as long as we all are OK with login through Google eventually breaking.

Replies are listed 'Best First'.
Re^4: login with google account
by Corion (Patriarch) on Oct 11, 2024 at 15:48 UTC

    I now realize that a Google login should be restricted to its own special page. I don't want to have a cookie warning on every page, just because we add some Google Javascript to every page that they use for setting random cookies in the users browsers.

[reply]
      Was going to do the hard work on the backend, no Google js.

      --
      A math joke: r = | |csc(θ)|+|sec(θ)| |-| |csc(θ)|-|sec(θ)| |
[reply]
Re^4: login with google account
by ysth (Canon) on Oct 11, 2024 at 14:34 UTC
    Google broke compatibility once, when they switched from openid to openidconnect. I suspect it will be a very long time before it happens again. Unlike Facebook, where they broke it over and over until I gave up.

    --
    A math joke: r = | |csc(θ)|+|sec(θ)| |-| |csc(θ)|-|sec(θ)| |
[reply]

In Section Inner Scriptorium