Questions tagged [stack-exchange-openid]

Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.

Filter by
Sorted by
Tagged with
208 votes
29 answers
31k views

Support for OpenID ended on July 25, 2018

NOTE: Signing up or Logging in via OpenID is no longer officially supported from any of our sites. Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of ...
user avatar
  • 16.4k
120 votes
1 answer
1k views

Security hole: password change dialog doesn't ask for a user's current password

NB: Not asking for a current password allows an attacker who has somehow hijacked current session's cookies to hijack the account as well, in direct contravention of OWASP Guideline AT-011 What ...
user avatar
  • 7,339
113 votes
4 answers
3k views

Can Stack Overflow change the password criteria?

Why the crazy password requirements? It a Q&A site, and I have to conform to arbitrarily chosen password complexity criteria. With a 22 random lowercase characters (entropy 119 bits), the create ...
user avatar
112 votes
4 answers
18k views

How do I change the email address associated with my Stack Exchange OpenID? [duplicate]

I registered my Stack Overflow account using the Stack Exchange OpenID provider. I later changed my e-mail, but I cannot change the e-mail address associated with my OpenID for some reason. Why is ...
user avatar
  • 1,343
89 votes
1 answer
17k views

How can I change my Stack Exchange login email? [duplicate]

I have already changed my email via one of Stack Exchange's sites, and it has been changed on all other sites as well. However, I can only log in with my old email address. I don't use any third-...
user avatar
  • 1,487
80 votes
10 answers
3k views

If we built two-factor authentication for Stack Exchange OpenID, would you use it? [closed]

We've decided that we won't be working on this project. Sorry to all the people who were in favour of it. [Related: Two factor authentication for Stack Exchange] So, over the last couple of weeks, I ...
user avatar
  • 4,928
43 votes
2 answers
697 views

Can't login with Stack Exchange OpenID when HTTPS-Everywhere plugin is active - apparent protocol mismatch

I can't seem to log in with my Stack Exchange OpenID. When I try, I get the error message: Unable to log in with your OpenID provider: The openid.return_to parameter (https://unix....
user avatar
  • 8,847
41 votes
2 answers
686 views

Is the Stack Overflow login secure against enumeration attacks?

I just noticed that when you go to https://stackoverflow.com/users/login#log-in pick "Stack Exchange" enter any email address submit the form without entering a password you will get a message like "...
user avatar
  • 383
36 votes
2 answers
389 views

StackExchange OpenID provider should clearly use HTTPS

As discussed in this question on Meta.Security.SE, the SE OpenID provider seems to be using some sort of AJAX call to replace part of the page. The outer page uses plain HTTP, whereas the OpenID part (...
user avatar
  • 783
31 votes
1 answer
918 views

Option to add a Stack Exchange Login to Existing Account has gone AWOL

When I was trying to help this user, I noticed that there is no "Sign Up" or "Login" option for a Stack Exchange account when you are already signed in. I know it used to be there, what happened to ...
user avatar
  • 30.9k
24 votes
5 answers
2k views

Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login

The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be. Applies to: * stackexchange.com,...
user avatar
22 votes
1 answer
972 views

How can I add a Stack Exchange login to my preexisting account? [duplicate]

When I created my account, I used Facebook Connect as my only login type and I can only log in to my account using it. I wish to create a Stack Exchange login to be able to log in with instead of ...
user avatar
  • 387
21 votes
2 answers
164 views

Make clear in the logon screen you can log in with your SE account

Some people don't really understand how to log on with your SE account in the new logon screen. And although it might be obvious to most of us, some people find the new dialog hard to understand. ...
user avatar
21 votes
1 answer
301 views

Improve SE OpenID logout security and user experience on shared or public machines

In May, Stack Exchange became an OpenID provider. It's now the first available choice when creating a new account on an SE site. When selecting it, you're offered a well-integrated login and ...
user avatar
  • 13.2k
20 votes
0 answers
249 views

Tell me how to log out of Stack Exchange OpenID

I've logged in to my account using Stack Exchange OpenID. That is, I just clicked the "log in" link in the top bar, and typed in my e-mail address and password. When I now want to log out again, ...
user avatar
19 votes
3 answers
343 views

Don't give away incorrect password/username info

I don't think it's safe or even good practice to tell a user specifically what part of my authentication credentials is faulty. I practically guessed my way to my correct username because SO let me ...
user avatar
  • 582
18 votes
1 answer
126 views

Can we please get text labels for the new OpenID registration form?

First off, I am quite pleased to see that Stack Exchange is now an OpenID provider. I see this as a very good thing for not only Stack Exchange but also the sites that will now be inspired to add ...
user avatar
17 votes
0 answers
174 views

What is the 10.7.2.15 entry in the history log of my SE Open ID account? [duplicate]

I'm asking this question on behalf of my second account: KennyBOT KennyBOT uses a Stack Exchange account and therefore logs in with the Stack Exchange Open ID provider which enables users to see ...
user avatar
  • 81.1k
15 votes
1 answer
201 views

Unable to login into Stack Exchange Data Explorer

It might be related to the recent SEDE outage but I'm unable to login to SEDE via Stack Exchange Open ID. When clicking the 'Log in using Stack Exchange' button, I get an error message No OpenID ...
user avatar
  • 222k
14 votes
3 answers
766 views

Why is my StackExchange OpenID so hard to find? [closed]

With the new login process in meta.SO, I would prefer to login manually via my OpenID rather than enter my username/password combo. As a result, I was looking for my StackExchange OpenID URL, and only ...
user avatar
  • 1,795
14 votes
1 answer
154 views

Is it possible to make signing up gracefully fail over to logging in if the SE OpenID account exists?

For most OpenID options, it doesn't much matter if you pick the "Sign up" versus the "Log in" tab on the sign in page. Whether you have an account on the site or not, it just does the right thing. ...
user avatar
  • 75.2k
13 votes
2 answers
223 views

Logging into Ask LibreOffice with my Stack Exchange OpenID

If I'm on http://ask.libreoffice.org/en/account/signin/?next=/en/, I click on OpenID and then enter https://openid.stackexchange.com and click Log In, I get a page that says: An error occurred on the ...
user avatar
  • 243
12 votes
2 answers
632 views

Log in to Disqus with StackExchange OpenID

Disqus shows three fields on their login page: "Username or Email", "Password", and "OpenID URL". If you put https://openid.stackexchange.com into "OpenID URL" (...
user avatar
  • 223
12 votes
2 answers
150 views

What information does Stack Overflow collect when signing in with OpenID?

What exact information does Stack Overflow collect when signing in with OpenID?
user avatar
11 votes
2 answers
683 views

Will you loosen password requirements on StackExchange accounts? [duplicate]

Possible Duplicate: Can Stack Overflow change the password criteria? The StackExchange account passwords requirements are quite onerous, arbitrary, and undocumented, particularly the requirement of ...
user avatar
  • 5,900
11 votes
1 answer
252 views

No way to login with stack exchange on askubuntu.com? [duplicate]

I just noticed that I'm not logged in on askubuntu.com and here's my login page: What do I click to just use my connected StackExchange account?
user avatar
  • 727
11 votes
1 answer
162 views

Logging in with a StackExchange account causes IE8 to go catatonic

When I first signed up for Drupal Answers, instead of my normal MyOpenID identity I created a StackExchange account -- by "mistake" since I somehow missed the MyOpenID option. I've since signed ...
user avatar
11 votes
0 answers
108 views

Is it possible to merge an old and new data.SE login?

Today I tried to log in on https://data.stackexchange.com/ using my regular Yahoo account but was unable to. I get: No OpenID endpoint found. When I log in using the Stack Exchange option I get a ...
user avatar
  • 4,518
11 votes
1 answer
136 views

What are the plans regarding OpenID / OpenID Connect?

The OpenID protocol that is used by Stack Exchange websites has been obsolete for a while. Is it going to be upgraded to something that is not obsolete? OpenID Connect comes to mind.
user avatar
10 votes
1 answer
354 views

Area 51 login failure with HTTPS Everywhere

I could not log in to Area 51 in Chrome 62 under Linux. After entering my credentials and authenticating to my OpenID provider (Stack Exchange), I was redirected back to https://area51.stackexchange....
user avatar
10 votes
1 answer
686 views

Unable to log in with your OpenID provider: Message signature was incorrect on Area51 only

I have registered to meta.stackexchange.com successfully, I was also able to Sign Up on superuser fine using the same credentials. However when I tried to log in with Stack Exchange details at Area51,...
user avatar
  • 139
10 votes
1 answer
195 views

Seamless account creation on StackExchange sites

If try to create an account in any StackExchange site, you will be presented with a signup page, which has Google, Facebook, and StackExchange as signup options. When you choose and click Google/...
user avatar
10 votes
0 answers
196 views

What is the status of the removal process of Stack Exchange OpenID?

Back in October 26th 2018, SE project manager wrote: Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of completely removing it It's still on the ...
user avatar
10 votes
0 answers
783 views

Why can I not finish sign up? [closed]

I always have this thing at the top of the screen next to my name that says "finish signup". So, I click on it, and see what happens. I get to this screen, and I enter a password. After I do ...
user avatar
10 votes
0 answers
113 views

Add "Create" option to the StackExchange OpenID login page

After reading the blog entry announcing the StackExchange OpenID provider, I was anxious to add a StackExchange login to my account for redundancy. I went to update my account and clicked on the new ...
user avatar
  • 6,380
9 votes
1 answer
160 views

Switch from OpenID to a Stack Exchange login

When I started using Stack Exchange sites several years ago, I logged in using Google since I wasn't sure I wanted yet another login. Well, at this point I value my Stack Exchange identity ...
user avatar
  • 193
9 votes
1 answer
86 views

Logging in with Stack Exchange OpenID from the "Ask Question" page cause the question to be lost

I recently prepped a question on a site which I had not yet created an account on. After preparing the question and clicking 'Log in', I logged in as normal, but then was prompted to create the new ...
user avatar
  • 421
9 votes
1 answer
794 views

Two ways to join a community; why is one more complex than the other?

I have a StackExchange login that I use for all the communities that I'm a member of. If I visit a community that I am not a member of, the title bar shows a link. Clicking it brings up a "CONFIRM ...
user avatar
9 votes
0 answers
2k views

How can I change my login email address for Stack Overflow? [duplicate]

How can I change my login email address for Stack Overflow? I tried editing from my account, but that didn't work if I used that email during login.
user avatar
8 votes
1 answer
582 views

How do I add a Google OpenID login?

Apologies in advance if this question is all over the place. I have no idea how OpenID works and how SE's various login systems are related to eachother. I am attempting to add a Google OpenID login ...
user avatar
  • 25.3k
8 votes
1 answer
238 views

Stack Exchange Facebook OpenID login issue

I was trying to search for an old message in my inbox on Stack Overflow and clicked on all Items link which redirected me to https://stackexchange.com/users/login which displays the following ...
user avatar
8 votes
1 answer
1k views

Cannot login to Area 51 [duplicate]

When I attempt to login to Area 51, with the Stack Exchange OpenID, it gives me the following error: Unable to log in with your OpenID provider: The openid.return_to parameter (http://area51....
user avatar
  • 734
8 votes
0 answers
362 views

How can I see which devices are actively logged into Stack Exchange account?

The user page of Stack Exchange Open ID gives login history of Stack Exchange as well as Open ID, but it registers logout history of only Open ID and not of Stack Exchange. Is there any way to see the ...
user avatar
  • 181
8 votes
0 answers
94 views

What do I need to correctly request chat websocket auth?

I'm (attempting) to build an SE chat library in Ruby, since it's one of the few languages that doesn't yet seem to have one (Brainf**k, anyone?). As part of that, I need to make a request to http://...
user avatar
  • 35.9k
7 votes
1 answer
2k views

Should changing your password invalidate all existing logins?

Last night I changed the password for my Stack Exchange OpenID. As a security precaution, I would expect that all of my sessions be invalidated and to be asked to log in again on all sites where I use ...
user avatar
7 votes
1 answer
73 views

Deleted "Real Name" returns after logging in on mobile site

In my profile, I had once entered a real name and after some time I decided to delete it. On my PC in my profile I clicked edit and deleted the name and it stopped showing up. However, every now and ...
user avatar
  • 173
7 votes
1 answer
181 views

Why do I have to enter my password to log in?

Using the Stack Exchange login, why do I have to enter my password again and again to log in? Wasn’t the whole purpose of OpenID to do away with this? This doesn’t even only happen when visiting a ...
user avatar
7 votes
1 answer
95 views

Bugs in sign-up procedure, SPF and link encoding

I created an account (as in, I don't use a third party openid provider). I encountered two bugs in this process. First, the confirmation mail was recognized as spam by my provider, with "From SPF ...
user avatar
7 votes
0 answers
90 views

Can't log in with Stack Exchange OpenID after clicking "Google"

This appears to be sorta the reverse of this older bug: if I click the "Google" button by mistake and then go back to fill in my credentials, the page assumes I'm trying to log in with ...
user avatar
  • 434k
6 votes
2 answers
73 views

Logging out from Stack Exchange does not work [duplicate]

The "log out" functionality of Stack Exchange appears to be broken. You can reproduce this with the following steps: Logging in: Click "log in" on the top bar Click "log in with Stack Exchange" ...
user avatar