Re: Google deprecating OpenID 2.0

[Graham Bloice <graham.bloice () trihedral com>]

On 24 February 2015 at 17:41, Gerald Combs <gerald () wireshark org> wrote:

> On 2/24/15 1:34 AM, Graham Bloice wrote:
> > On 23 February 2015 at 23:51, Gerald Combs <gerald () wireshark org
> > <mailto:gerald () wireshark org>> wrote:
> >
> >     On 2/22/15 6:01 AM, Graham Bloice wrote:
> >     > See https://developers.google.com/accounts/docs/OpenID
> >     >
> >     > Does this affect our use of Gerrit if we use a Google account to
> >     > authenticate?
> >
> >     Yes. In case anyone missed the other responses you need to stop
> >     authenticating using your Google account and switch to another
> account
> >     before April 20. I've added a notice to the login page.
> >
> >     In the near term we need to find a list of stable OpenID 2.0
> providers
> >     that we can recommend on the login page. In the long term we need to
> >     find a more stable way of authenticating to Gerrit.
> >
> >
> > And is there any possibility of Gerrit supporting Open ID 2.0 Connect
> > which is what Google+ supports and seems to be the future for Open ID?
> > The Gerrit issues tracker is very confusing on this.
>
> I'm not sure. The closest thing I've seen so far was a change to add
> GitHub OAuth support but it was abandoned:
>
> https://gerrit-review.googlesource.com/#/c/57570/
>
> The following discussions provide a bit more background:
>
> https://groups.google.com/forum/#!topic/repo-discuss/Hjn-6BV3KBU
> https://groups.google.com/forum/#!topic/repo-discuss/nrtxry9SNLg
>
>
> From those threads it seems that the GitHub OAuth 2.0 patch was abandoned
as it wasn't "pluggable", and that they are going to come back with a
pluggable version.

It also seems that they will have to support OAuth 2.0 in general (which
Google+ can be configured to work as), as that's where everyone is heading
according to the list in one thread.


-- 
Graham Bloice

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe