[Django]-How does Google generate its OpenID claimed_id tokens?

4👍

From the docs:

openid.realm

Authenticated realm. Identifies the domain that the end user is being asked to trust. (Example: “http://*.myexamplesite.com”) This value must be consistent with the domain defined in openid.return_to. If this parameter is not defined, Google will use the URL referenced in openid.return_to.

The value of realm is used on the Google Federated Login page to identify the requesting site to the user. It is also used to determine the value of the persistent user ID returned by Google.

0👍

StackOverflow had the same problems with different hash OpenID tokens. They detail there problems and a possible solution (Google profiles) on StackOverflow blog.

https://blog.stackoverflow.com/2009/11/google-offers-named-openids/

Leave a comment