Questions tagged [authentication]
For questions about how authentication within the Stack Exchange network works. General questions about authentication are off-topic, but depending on the specific question may find a home at e.g. Stack Overflow or Security Stack Exchange.
98
questions
1
vote
0
answers
48
views
Log in using MFA? [duplicate]
Is there a way to add 2FA or MFA to my existing Stack Exchange login, or I do have to add a GitHub, Google, etc. login?
I tried searching the help and looking around the settings, but I couldn't see ...
- 8,711
14
votes
0
answers
377
views
I keep getting logged out of Stack Overflow
This has been reported quite a few times over the years, both with Chrome and Firefox (and maybe others, I did not read all the comments).
Since it is driving me crazy (but it's not like there is an ...
- 249
31
votes
1
answer
2k
views
Can one log in using multiple Google accounts with Stack Overflow?
I don't see an option anywhere though, perhaps some hack.
If not, can this be a feature request?
- 7,418
23
votes
1
answer
370
views
OpenID endpoints and URL will be removed on November 1, 2022
Back in 2018, we announced the end of support for OpenID at Stack. Although we've deprecated support for OpenID logins and endpoints, the openid.stackexchange.com URL has remained online. Starting in ...
- 6,675
15
votes
0
answers
193
views
Stack Exchange & Area 51 sign up/ log in update
As of today, Stack Exchange and Area 51 no longer have separate login and signup pages. When you log in or sign up on either site you will be sent through meta.stackexchange.com flow. Currently, ...
- 65.9k
-6
votes
1
answer
99
views
Question based on Authentication
I am creating a connector which will integrate with the Stack Overflow API. I need to generate an access token of Stack Overflow account so that I can fetch its API. But when I am generating an access ...
- 6,675
7
votes
1
answer
2k
views
Where and how is the authentication cookie stored with the new authentication system?
My browser is configured with several cookie restrictions (clear cookies on exit, no third party cookies, and privacy badger on top of that). I found that after SE recently switched to a new ...
- 170k
6
votes
0
answers
84
views
Why am I occasionally logged in to different domains, or am I?
When I log out, I usually get a message saying I will be logged out of these seven domains:
Notwithstanding the fact I don't know what most of these are, nor consciously visit any of them apart from ...
- 7,418
23
votes
2
answers
681
views
Did something change with Stack Exchange's cross-domain login process? (no longer working)
I have my web browser set to block all third-party cookies. The only place where this is an issue is on Stack Exchange sites, where it prevents a log in action on one site from successfully logging ...
5
votes
0
answers
95
views
Top navbar not updated when login session is invalidated
tl;dr When editing existing post after your session has been invalidated in the background, editor itself reflects the fact that user has been logged-off, but top navbar remains unchanged and still ...
35
votes
1
answer
1k
views
How does one Stack Exchange site know that I'm logged in to the other?
Here's what I did:
Completely cleared my browser of all cookies
Opened a new browser window in Incognito mode
Navigated to askubuntu.com and log in
Opened a new tab and navigate to stackoverflow.com
...
- 1,451
10
votes
1
answer
130
views
What scope to supply to get a refresh token from Stack Exchange?
In the process of implementing a OAuth app for Stack Exchange, I noticed that none of the approaches that conventionally work - supplying a offline_access scope, for example - result in the OAuth ...
GlorfindelMod
- 248k
4
votes
1
answer
542
views
API authentication channelUrl from a userscript?
The Stack Exchange API has this Javascript library for authentication.
What do I pass as channelUrl for a user script running on SE sites?
The docs said it needed to be "a blank page on the same ...
- 26.8k
-10
votes
1
answer
193
views
Support logging in with Apple
Title explains all.
SE currently supports logging in with GitHub, Google and Facebook.
In terms of tracking user behavior, Apple seems to be a better login option to me than Google and Facebook.
...
- 55
5
votes
1
answer
255
views
How can I "authenticate" my Stack Exchange API app without OAuth authenticating it?
I am the creator of StackStalker, a Chrome extension created to simply monitor questions a user chooses and be notified when they've been updated. I've been working on updating it to use the new API 2....
CommunityBot
- 1
110
votes
2
answers
24k
views
How does SO's new auto-login feature work?
SO and SU just told me I've been logged in. I'm guessing because I'm already logged into my Google account... but how does SO know that?
CommunityBot
- 1
6
votes
1
answer
624
views
Logging in to Stack Overflow with private key
Most of the time you access Linux machines you'll use SSH with a private key. You add your public key to ~/.ssh/authorized_keys and done, you can login using your private key and passphrase.
To serve ...
- 1
34
votes
5
answers
5k
views
Authenticate to Stack Exchange using GitHub
I've seen sign in methods using GitHub as an authentication provider, for example c9.io: (AWS Cloud9)
Is it possible to authenticate into Stack Exchange using this method? At the moment there's ...
- 49k
1
vote
1
answer
58
views
Cannot login using Google authentication [closed]
For some reason, I'm not able to login to an of the SE sites using Google authentication today. Did something change?
PS. I had to create a direct login on SE using my other e-mail id to report this ...
- 49
24
votes
5
answers
2k
views
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login
The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be.
Applies to:
* stackexchange.com,...
CommunityBot
- 1
0
votes
0
answers
38
views
Redirect to the original page after authorization on SEDE [duplicate]
After authorization, https://data.stackexchange.com redirects to the main page.
Could you redirect to the original page (from which I've tried to log in)?
- 6,675
3
votes
1
answer
217
views
Unable to change OpenID to StackExchange OpenID
I'm trying to change my primary OpenID ( on my Super User account) from MyOpenID to Stack Exchange. Went over to my profile, clicked on "Change OpenID", and selected Login with Stack ...
CommunityBot
- 1
3
votes
0
answers
105
views
Got invalid certificate error trying to log in [closed]
I got an invalid certificate error for stackauth.com a few minutes ago when trying to log in to SuperUser via Google. I tried again (after taking a screenshot and blacking out the potentially ...
11
votes
0
answers
150
views
Google auth seems broken
I can't seem to login using my Google account. Luckily I still have an active session on the main things I care about but when I log into anything with my Google auth, I get:
There was an error ...
- 3,334
16
votes
1
answer
159
views
Will Google+ APIs shutting down affect signing in into Stack Exchange sites?
According to this article, Google+ APIs will shut down on March 7, 2019. Since I am using Google to provide authentication for several web sites (SE sites included), I am wondering if SE network will ...
3
votes
1
answer
47
views
SEDE login authentication
I have the impression that SE's login is universal. Once logged into any one of the sites on the SE network, one can enter other sites without further login. For example, I'm logged into Math.SE, so ...
GlorfindelMod
- 248k
1
vote
1
answer
259
views
Stack Overflow login problem from two different networks
I am quite a new user and recently started to access Stack Overflow both from the office and from home. I created an account and a password and also added a few OpenID logins to my account (Yahoo,...
- 86.2k
3
votes
0
answers
80
views
Network Login Troubleshooting fails on Messaging whereas Caniuse.com tests positive
A couple of months ago, I was forced to switch to the Vivaldi browser which I do happen to like a lot.
The Vivaldi browser might be considered the spiritual successor to the Opera browser, sharing ...
- 24.9k
7
votes
0
answers
114
views
Logging in to the Area 51 Discussion Zone will successfully log you into the main Area 51 site, but not the Discussion Zone itself
In the Area 51 Discussion Zone (DZ), the log in link is for area51.stackexchange.com, not area51.meta.stackexchange.com.
Because of domain restrictions, etc., after successfully logging in you get ...
- 18.6k
4
votes
0
answers
44
views
Port not included in client-side OAuth flow
I was recently making an app using the SE API's client-side auth flow. What I noticed is that there was this
Unable to post message to http://localhost. Recipient has origin http://localhost:5000.
...
- 856
2
votes
0
answers
193
views
Is it still possible to log into Stack Exchange using an AOL OpenID?
I am posting from a new account I have created, as I have been unable to access my Stack Exchange account for several days.
My account is tied to my AOL OpenID exclusively. For quite some time, ...
- 159k
2
votes
0
answers
77
views
Redirect parameter `state` is missing in case of error
Testing OAuth authorization in my app I noticed a case when state parameter is not passed to redirect uri. I use state to track auth process at server side.
If user doesn't authorize application, he ...
- 21
5
votes
1
answer
159
views
Using oAuth in API throwing internal server error
My application has 26 users, but yesterday several (prospective) users started receiving an error page (/error?aspxerror=/oauth) saying that it is all [stack exchange's] fault and that the data is ...
- 21
6
votes
1
answer
2k
views
Authentication API - port number in redirect_uri is ignored
We're using the API explicit flow for identity brokering in our Keycloak SSO server to provide users with the option for logging in using their Stack Overflow account.
Recently, we've noticed that ...
- 60.1k
11
votes
1
answer
172
views
Can't remove applications
A couple days ago I added a application from StackApps, now for some reason I can't remove it.
Steps to reproduce:
Have an application on your account
Go to your profile (Edit Profile & ...
- 49k
10
votes
1
answer
750
views
Is stackauth.com still in use?
Once upon a time, stackauth.com was used for global authentication, for the API, etc.
And the StackAuth home page still states:
This is a domain for centralized services across the entire Stack ...
- 159k
6
votes
2
answers
43k
views
Firefox popup 'Authentication Required' when accessing Stack Overflow
One of the more recent updates to Firefox started to popup a message whenever I access StackOverflow from my work machine, along the lines of:
'The proxy moz-proxy://xxx:8080 is requesting a user ...
- 1
7
votes
1
answer
220
views
Support certificate based authentication
See: Cutting the Gordian Knot of Web Identity
Please consider adding certificate-based authentication to Stack Exchange as another form of authentication. I believe this method of authentication is ...
CommunityBot
- 1
18
votes
1
answer
191
views
Don't tell me which of my credentials is wrong
If I mistype my username or password when logging in to Stack Exchange, the red dialogue box tells me which was incorrect.
If an attacker correctly guesses an email address present in the database ...
CommunityBot
- 1
6
votes
1
answer
399
views
Enable two-step verification for all Stack Exchange sites [duplicate]
I have two-step verification (via Google Authenticator) enabled for almost all of my accounts on the Internet. I somehow feel safe with that.
I have enabled two-step verification for almost all my ...
- 6,675
4
votes
1
answer
58
views
Join this Community bug on Area51
When I clicked on the "Join This Community" banner on an area 51 question, I was redirected to the following page:
https://area51.stackexchange.com/users/join?ssrc=head&returnurl=http%3a%2f%...
- 159k
1
vote
1
answer
760
views
How is user information stored in ElasticSearch database of Stack Exchange network?
How is user information stored in the ElasticSearch database of the StackExchange network?
I know that SO and the other websites of the same family use ElasticSearch database to store the data, but ...
- 154k
1
vote
0
answers
97
views
Authentication with google as well as direct login
I have my stackexchange account with google authentication. But in some net work gmail is blocked. So is there any way to maintain the same account with dual authentication.Like google login as well ...
CommunityBot
- 1
1
vote
0
answers
41
views
Use the login on StackExchange.com in other SE sites [duplicate]
I am logged in on StackExchange.com, I want to login on another SE site without entering a password. Why do I have to choose a third party provider?
Isn't using cookies possible for subdomains? I see ...
- 4,112
85
votes
1
answer
7k
views
"OpenID 2.0 for Google Accounts is going away"; will this affect Stack Exchange? [closed]
Apparently, for some reason, Google is retiring its OpenID 2.0 platform. I got this notice while logging in with Disqus, but not with Stack Exchange.
So... is Stack Exchange going to be affected by ...
CommunityBot
- 1
7
votes
1
answer
68
views
Links between my SE accounts should bypass login
When I get a notification in my inbox in the upper left corner about an event on one of the SE sites other than the one I am logged into, frequently I have to login again. This is mildly annoying, ...
1
vote
0
answers
53
views
Messaging failed - doesn't give more info. as to what to do about it [duplicate]
I am opening this so that if I run into the same situation would perhaps know what to do as well as others.
I am trying to login to sites and most sites work except for some meta sites. For this I ...
- 129
26
votes
0
answers
901
views
Why do I keep getting logged out of Stack Overflow?
I keep on getting logged out of Stack Overflow on my personal computer. This can happen even when I've been logged in earlier in the same day. It used to be that I'd never get logged out of SO (which ...
- 311
4
votes
0
answers
670
views
StackExchange Single Sign on
What is the technique or procedure used in implementing Single Sign On in StackExchange websites?
Whether it is possible to implement custom authentication providers so that the site credentials can ...
- 141
1
vote
0
answers
52
views
Logged in to SO chat using Google account, but logged out when entering a room
I can authenticate successfully with a Google account at chat.stackoverflow.com, but when I navigate to a room I'm not logged in any more.
Is anyone else having this issue? Or is it just me?
I can ...
- 4,998