Questions tagged [stack-exchange-openid]
Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.
185
questions
206
votes
29answers
31k views
Support for OpenID ended on July 25, 2018
NOTE: Signing up or Logging in via OpenID is no longer officially supported from any of our sites. Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of ...
120
votes
1answer
1k views
Security hole: password change dialog doesn't ask for a user's current password
NB: Not asking for a current password allows an attacker who has somehow hijacked current session's cookies to hijack the account as well, in direct contravention of OWASP Guideline AT-011
What ...
113
votes
4answers
3k views
Can Stack Overflow change the password criteria?
Why the crazy password requirements? It a Q&A site, and I have to conform to arbitrarily chosen password complexity criteria.
With a 22 random lowercase characters (entropy 119 bits), the create ...
111
votes
4answers
18k views
How do I change the email address associated with my Stack Exchange OpenID? [duplicate]
I registered my Stack Overflow account using the Stack Exchange OpenID provider. I later changed my e-mail, but I cannot change the e-mail address associated with my OpenID for some reason. Why is ...
79
votes
10answers
2k views
If we built two-factor authentication for Stack Exchange OpenID, would you use it? [closed]
We've decided that we won't be working on this project. Sorry to all the people who were in favour of it.
[Related: Two factor authentication for Stack Exchange]
So, over the last couple of weeks, I ...
75
votes
1answer
14k views
How can I change my Stack Exchange login email? [duplicate]
I have already changed my email via one of Stack Exchange's sites, and it has been changed on all other sites as well. However, I can only log in with my old email address.
I don't use any third-...
43
votes
2answers
685 views
Can't login with Stack Exchange OpenID when HTTPS-Everywhere plugin is active - apparent protocol mismatch
I can't seem to log in with my Stack Exchange OpenID. When I try, I get the error message:
Unable to log in with your OpenID provider:
The openid.return_to parameter (https://unix....
41
votes
2answers
643 views
Is the Stack Overflow login secure against enumeration attacks?
I just noticed that when you
go to https://stackoverflow.com/users/login#log-in
pick "Stack Exchange"
enter any email address
submit the form without entering a password
you will get a message like "...
36
votes
2answers
385 views
StackExchange OpenID provider should clearly use HTTPS
As discussed in this question on Meta.Security.SE, the SE OpenID provider seems to be using some sort of AJAX call to replace part of the page. The outer page uses plain HTTP, whereas the OpenID part (...
31
votes
1answer
880 views
Option to add a Stack Exchange Login to Existing Account has gone AWOL
When I was trying to help this user, I noticed that there is no "Sign Up" or "Login" option for a Stack Exchange account when you are already signed in. I know it used to be there, what happened to ...
24
votes
5answers
2k views
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login
The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be.
Applies to:
* stackexchange.com,...
21
votes
1answer
943 views
How can I add a Stack Exchange login to my preexisting account? [duplicate]
When I created my account, I used Facebook Connect as my only login type and I can only log in to my account using it.
I wish to create a Stack Exchange login to be able to log in with instead of ...
21
votes
2answers
158 views
Make clear in the logon screen you can log in with your SE account
Some people don't really understand how to log on with your SE account in the new logon screen.
And although it might be obvious to most of us, some people find the new dialog hard to understand.
...
21
votes
1answer
298 views
Improve SE OpenID logout security and user experience on shared or public machines
In May, Stack Exchange became an OpenID provider. It's now the first available choice when creating a new account on an SE site. When selecting it, you're offered a well-integrated login and ...
20
votes
0answers
239 views
Tell me how to log out of Stack Exchange OpenID
I've logged in to my account using Stack Exchange OpenID. That is, I just clicked the "log in" link in the top bar, and typed in my e-mail address and password.
When I now want to log out again, ...
19
votes
3answers
341 views
Don't give away incorrect password/username info
I don't think it's safe or even good practice to tell a user specifically what part of my authentication credentials is faulty. I practically guessed my way to my correct username because SO let me ...
18
votes
1answer
125 views
Can we please get text labels for the new OpenID registration form?
First off, I am quite pleased to see that Stack Exchange is now an OpenID provider. I see this as a very good thing for not only Stack Exchange but also the sites that will now be inspired to add ...
17
votes
0answers
167 views
What is the 10.7.2.15 entry in the history log of my SE Open ID account? [duplicate]
I'm asking this question on behalf of my second account: KennyBOT
KennyBOT uses a Stack Exchange account and therefore logs in with the Stack Exchange Open ID provider which enables users to see ...
15
votes
1answer
194 views
Unable to login into Stack Exchange Data Explorer
It might be related to the recent SEDE outage but I'm unable to login to SEDE via Stack Exchange Open ID. When clicking the 'Log in using Stack Exchange' button, I get an error message
No OpenID ...
14
votes
3answers
765 views
Why is my StackExchange OpenID so hard to find? [closed]
With the new login process in meta.SO, I would prefer to login manually via my OpenID rather than enter my username/password combo. As a result, I was looking for my StackExchange OpenID URL, and only ...
14
votes
1answer
145 views
Is it possible to make signing up gracefully fail over to logging in if the SE OpenID account exists?
For most OpenID options, it doesn't much matter if you pick the "Sign up" versus the "Log in" tab on the sign in page. Whether you have an account on the site or not, it just does the right thing. ...
13
votes
2answers
217 views
Logging into Ask LibreOffice with my Stack Exchange OpenID
If I'm on http://ask.libreoffice.org/en/account/signin/?next=/en/, I click on OpenID and then enter https://openid.stackexchange.com and click Log In, I get a page that says:
An error occurred on the ...
12
votes
2answers
624 views
Log in to Disqus with StackExchange OpenID
Disqus shows three fields on their login page: "Username or Email", "Password", and "OpenID URL". If you put https://openid.stackexchange.com into "OpenID URL" (...
12
votes
2answers
149 views
What information does Stack Overflow collect when signing in with OpenID?
What exact information does Stack Overflow collect when signing in with OpenID?
11
votes
2answers
674 views
Will you loosen password requirements on StackExchange accounts? [duplicate]
Possible Duplicate:
Can Stack Overflow change the password criteria?
The StackExchange account passwords requirements are quite onerous, arbitrary, and undocumented, particularly the requirement of ...
11
votes
1answer
162 views
Logging in with a StackExchange account causes IE8 to go catatonic
When I first signed up for Drupal Answers, instead of my normal MyOpenID identity I created a StackExchange account -- by "mistake" since I somehow missed the MyOpenID option.
I've since signed ...
11
votes
0answers
105 views
Is it possible to merge an old and new data.SE login?
Today I tried to log in on https://data.stackexchange.com/ using my regular Yahoo account but was unable to. I get:
No OpenID endpoint found.
When I log in using the Stack Exchange option I get a ...
11
votes
1answer
133 views
What are the plans regarding OpenID / OpenID Connect?
The OpenID protocol that is used by Stack Exchange websites has been obsolete for a while.
Is it going to be upgraded to something that is not obsolete? OpenID Connect comes to mind.
10
votes
1answer
240 views
No way to login with stack exchange on askubuntu.com? [duplicate]
I just noticed that I'm not logged in on askubuntu.com and here's my login page:
What do I click to just use my connected StackExchange account?
10
votes
1answer
352 views
Area 51 login failure with HTTPS Everywhere
I could not log in to Area 51 in Chrome 62 under Linux. After entering my credentials and authenticating to my OpenID provider (Stack Exchange), I was redirected back to https://area51.stackexchange....
asked Dec 1 '17 at 19:46
Gilles 'SO- stop being evil'
105k25 gold badges206 silver badges453 bronze badges
10
votes
1answer
682 views
Unable to log in with your OpenID provider: Message signature was incorrect on Area51 only
I have registered to meta.stackexchange.com successfully, I was also able to Sign Up on superuser fine using the same credentials.
However when I tried to log in with Stack Exchange details at Area51,...
10
votes
1answer
192 views
Seamless account creation on StackExchange sites
If try to create an account in any StackExchange site, you will be presented with a signup page, which has Google, Facebook, and StackExchange as signup options.
When you choose and click Google/...
10
votes
0answers
183 views
What is the status of the removal process of Stack Exchange OpenID?
Back in October 26th 2018, SE project manager wrote:
Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of completely removing it
It's still on the ...
asked Apr 5 at 6:29
Shadow Wizard Wearing Mask V2
152k27 gold badges365 silver badges735 bronze badges
10
votes
0answers
774 views
Why can I not finish sign up? [closed]
I always have this thing at the top of the screen next to my name that says "finish signup".
So, I click on it, and see what happens. I get to this screen, and I enter a password.
After I do ...
10
votes
0answers
113 views
Add “Create” option to the StackExchange OpenID login page
After reading the blog entry announcing the StackExchange OpenID provider, I was anxious to add a StackExchange login to my account for redundancy. I went to update my account and clicked on the new ...
9
votes
1answer
149 views
Switch from OpenID to a Stack Exchange login
When I started using Stack Exchange sites several years ago, I logged in using Google since I wasn't sure I wanted yet another login. Well, at this point I value my Stack Exchange identity ...
9
votes
1answer
72 views
Logging in with Stack Exchange OpenID from the “Ask Question” page cause the question to be lost
I recently prepped a question on a site which I had not yet created an account on. After preparing the question and clicking 'Log in', I logged in as normal, but then was prompted to create the new ...
9
votes
0answers
2k views
How can I change my login email address for Stack Overflow? [duplicate]
How can I change my login email address for Stack Overflow?
I tried editing from my account, but that didn't work if I used that email during login.
8
votes
1answer
572 views
How do I add a Google OpenID login?
Apologies in advance if this question is all over the place. I have no idea how OpenID works and how SE's various login systems are related to eachother.
I am attempting to add a Google OpenID login ...
8
votes
1answer
231 views
Stack Exchange Facebook OpenID login issue
I was trying to search for an old message in my inbox on Stack Overflow and clicked on all Items link which redirected me to https://stackexchange.com/users/login which displays the following ...
8
votes
1answer
694 views
Two ways to join a community; why is one more complex than the other?
I have a StackExchange login that I use for all the communities that I'm a member of. If I visit a community that I am not a member of, the title bar shows a link. Clicking it brings up a "CONFIRM ...
8
votes
1answer
1k views
Cannot login to Area 51 [duplicate]
When I attempt to login to Area 51, with the Stack Exchange OpenID, it gives me the following error:
Unable to log in with your OpenID provider:
The openid.return_to parameter (http://area51....
8
votes
0answers
352 views
How can I see which devices are actively logged into Stack Exchange account?
The user page of Stack Exchange Open ID gives login history of Stack Exchange as well as Open ID, but it registers logout history of only Open ID and not of Stack Exchange.
Is there any way to see the ...
8
votes
0answers
89 views
What do I need to correctly request chat websocket auth?
I'm (attempting) to build an SE chat library in Ruby, since it's one of the few languages that doesn't yet seem to have one (Brainf**k, anyone?).
As part of that, I need to make a request to http://...
7
votes
1answer
1k views
Should changing your password invalidate all existing logins?
Last night I changed the password for my Stack Exchange OpenID. As a security precaution, I would expect that all of my sessions be invalidated and to be asked to log in again on all sites where I use ...
7
votes
1answer
72 views
Deleted “Real Name” returns after logging in on mobile site
In my profile, I had once entered a real name and after some time I decided to delete it. On my PC in my profile I clicked edit and deleted the name and it stopped showing up.
However, every now and ...
7
votes
1answer
177 views
Why do I have to enter my password to log in?
Using the Stack Exchange login, why do I have to enter my password again and again to log in? Wasn’t the whole purpose of OpenID to do away with this?
This doesn’t even only happen when visiting a ...
7
votes
1answer
95 views
Bugs in sign-up procedure, SPF and link encoding
I created an account (as in, I don't use a third party openid provider). I encountered two bugs in this process. First, the confirmation mail was recognized as spam by my provider, with "From SPF ...
6
votes
2answers
71 views
Logging out from Stack Exchange does not work [duplicate]
The "log out" functionality of Stack Exchange appears to be broken. You can reproduce this with the following steps:
Logging in:
Click "log in" on the top bar
Click "log in with Stack Exchange"
...
6
votes
2answers
118 views
Why is the Stack Exchange OpenID option expanded upon signup?
Today I got a support email from someone asking why they needed to establish a password in order to post questions. My first thought was that they were asking about some other site since we delegate ...
