Meta Stack Exchange

Questions tagged [stack-exchange-openid]

Ask Question

Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.

184 questions
Newest
Active
Bountied
Unanswered
Filter by
Sorted by
Tagged with
204
votes
29answers
30k views

Support for OpenID ended on July 25, 2018

NOTE: Signing up or Logging in via OpenID is no longer officially supported from any of our sites. Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of ...
120
votes
1answer
1k views

Security hole: password change dialog doesn't ask for a user's current password

NB: Not asking for a current password allows an attacker who has somehow hijacked current session's cookies to hijack the account as well, in direct contravention of OWASP Guideline AT-011 What ...
113
votes
4answers
3k views

Can Stack Overflow change the password criteria?

Why the crazy password requirements? It a Q&A site, and I have to conform to arbitrarily chosen password complexity criteria. With a 22 random lowercase characters (entropy 119 bits), the create ...
109
votes
4answers
18k views

How do I change the email address associated with my Stack Exchange OpenID? [duplicate]

I registered my Stack Overflow account using the Stack Exchange OpenID provider. I later changed my e-mail, but I cannot change the e-mail address associated with my OpenID for some reason. Why is ...
74
votes
10answers
2k views

If we built two-factor authentication for Stack Exchange OpenID, would you use it?

We've decided that we won't be working on this project. Sorry to all the people who were in favour of it. [Related: Two factor authentication for Stack Exchange] So, over the last couple of weeks, I ...
64
votes
1answer
12k views

How can I change my Stack Exchange login email? [duplicate]

I have already changed my email via one of Stack Exchange's sites, and it has been changed on all other sites as well. However, I can only log in with my old email address. I don't use any third-...
43
votes
2answers
685 views

Can't login with Stack Exchange OpenID when HTTPS-Everywhere plugin is active - apparent protocol mismatch

I can't seem to log in with my Stack Exchange OpenID. When I try, I get the error message: Unable to log in with your OpenID provider: The openid.return_to parameter (https://unix....
41
votes
2answers
597 views

Is the Stack Overflow login secure against enumeration attacks?

I just noticed that when you go to https://stackoverflow.com/users/login#log-in pick "Stack Exchange" enter any email address submit the form without entering a password you will get a message like "...
36
votes
2answers
385 views

StackExchange OpenID provider should clearly use HTTPS

As discussed in this question on Meta.Security.SE, the SE OpenID provider seems to be using some sort of AJAX call to replace part of the page. The outer page uses plain HTTP, whereas the OpenID part (...
31
votes
1answer
863 views

Option to add a Stack Exchange Login to Existing Account has gone AWOL

When I was trying to help this user, I noticed that there is no "Sign Up" or "Login" option for a Stack Exchange account when you are already signed in. I know it used to be there, what happened to ...
24
votes
5answers
2k views

Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login

The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be. Applies to: * stackexchange.com,...
22
votes
1answer
297 views

Improve SE OpenID logout security and user experience on shared or public machines

In May, Stack Exchange became an OpenID provider. It's now the first available choice when creating a new account on an SE site. When selecting it, you're offered a well-integrated login and ...
21
votes
1answer
886 views

How can I add a Stack Exchange login to my preexisting account? [duplicate]

When I created my account, I used Facebook Connect as my only login type and I can only log in to my account using it. I wish to create a Stack Exchange login to be able to log in with instead of ...
20
votes
3answers
330 views

Don't give away incorrect password/username info

I don't think it's safe or even good practice to tell a user specifically what part of my authentication credentials is faulty. I practically guessed my way to my correct username because SO let me ...
20
votes
0answers
217 views

Tell me how to log out of Stack Exchange OpenID

I've logged in to my account using Stack Exchange OpenID. That is, I just clicked the "log in" link in the top bar, and typed in my e-mail address and password. When I now want to log out again, ...
19
votes
2answers
153 views

Make clear in the logon screen you can log in with your SE account

Some people don't really understand how to log on with your SE account in the new logon screen. And although it might be obvious to most of us, some people find the new dialog hard to understand. ...
18
votes
1answer
125 views

Can we please get text labels for the new OpenID registration form?

First off, I am quite pleased to see that Stack Exchange is now an OpenID provider. I see this as a very good thing for not only Stack Exchange but also the sites that will now be inspired to add ...
17
votes
0answers
164 views

What is the 10.7.2.15 entry in the history log of my SE Open ID account? [duplicate]

I'm asking this question on behalf of my second account: KennyBOT KennyBOT uses a Stack Exchange account and therefore logs in with the Stack Exchange Open ID provider which enables users to see ...
15
votes
1answer
192 views

Unable to login into Stack Exchange Data Explorer

It might be related to the recent SEDE outage but I'm unable to login to SEDE via Stack Exchange Open ID. When clicking the 'Log in using Stack Exchange' button, I get an error message No OpenID ...
14
votes
3answers
763 views

Why is my StackExchange OpenID so hard to find? [closed]

With the new login process in meta.SO, I would prefer to login manually via my OpenID rather than enter my username/password combo. As a result, I was looking for my StackExchange OpenID URL, and only ...
14
votes
1answer
145 views

Is it possible to make signing up gracefully fail over to logging in if the SE OpenID account exists?

For most OpenID options, it doesn't much matter if you pick the "Sign up" versus the "Log in" tab on the sign in page. Whether you have an account on the site or not, it just does the right thing. ...
13
votes
2answers
212 views

Logging into Ask LibreOffice with my Stack Exchange OpenID

If I'm on http://ask.libreoffice.org/en/account/signin/?next=/en/, I click on OpenID and then enter https://openid.stackexchange.com and click Log In, I get a page that says: An error occurred on the ...
12
votes
2answers
620 views

Log in to Disqus with StackExchange OpenID

Disqus shows three fields on their login page: "Username or Email", "Password", and "OpenID URL". If you put https://openid.stackexchange.com into "OpenID URL" (as instructed on SE's blog) and click ...
12
votes
2answers
149 views

What information does Stack Overflow collect when signing in with OpenID?

What exact information does Stack Overflow collect when signing in with OpenID?
11
votes
2answers
673 views

Will you loosen password requirements on StackExchange accounts? [duplicate]

Possible Duplicate: Can Stack Overflow change the password criteria? The StackExchange account passwords requirements are quite onerous, arbitrary, and undocumented, particularly the requirement ...
11
votes
1answer
162 views

Logging in with a StackExchange account causes IE8 to go catatonic

When I first signed up for Drupal Answers, instead of my normal MyOpenID identity I created a StackExchange account -- by "mistake" since I somehow missed the MyOpenID option. I've since signed ...
11
votes
0answers
100 views

Is it possible to merge an old and new data.SE login?

Today I tried to log in on https://data.stackexchange.com/ using my regular Yahoo account but was unable to. I get: No OpenID endpoint found. When I log in using the Stack Exchange option I get a ...
11
votes
1answer
132 views

What are the plans regarding OpenID / OpenID Connect?

The OpenID protocol that is used by Stack Exchange websites has been obsolete for a while. Is it going to be upgraded to something that is not obsolete? OpenID Connect comes to mind.
10
votes
1answer
350 views

Area 51 login failure with HTTPS Everywhere

I could not log in to Area 51 in Chrome 62 under Linux. After entering my credentials and authenticating to my OpenID provider (Stack Exchange), I was redirected back to https://area51.stackexchange....
10
votes
1answer
679 views

Unable to log in with your OpenID provider: Message signature was incorrect on Area51 only

I have registered to meta.stackexchange.com successfully, I was also able to Sign Up on superuser fine using the same credentials. However when I tried to log in with Stack Exchange details at Area51,...
10
votes
1answer
188 views

Seamless account creation on StackExchange sites

If try to create an account in any StackExchange site, you will be presented with a signup page, which has Google, Facebook, and StackExchange as signup options. When you choose and click Google/...
10
votes
0answers
766 views

Why can I not finish sign up? [closed]

I always have this thing at the top of the screen next to my name that says "finish signup". So, I click on it, and see what happens. I get to this screen, and I enter a password. After I do ...
10
votes
0answers
113 views

Add “Create” option to the StackExchange OpenID login page

After reading the blog entry announcing the StackExchange OpenID provider, I was anxious to add a StackExchange login to my account for redundancy. I went to update my account and clicked on the new ...
9
votes
1answer
148 views

Switch from OpenID to a Stack Exchange login

When I started using Stack Exchange sites several years ago, I logged in using Google since I wasn't sure I wanted yet another login. Well, at this point I value my Stack Exchange identity ...
9
votes
1answer
71 views

Logging in with Stack Exchange OpenID from the “Ask Question” page cause the question to be lost

I recently prepped a question on a site which I had not yet created an account on. After preparing the question and clicking 'Log in', I logged in as normal, but then was prompted to create the new ...
9
votes
0answers
2k views

How can I change my login email address for Stack Overflow? [duplicate]

How can I change my login email address for Stack Overflow? I tried editing from my account, but that didn't work if I used that email during login.
8
votes
1answer
558 views

How do I add a Google OpenID login?

Apologies in advance if this question is all over the place. I have no idea how OpenID works and how SE's various login systems are related to eachother. I am attempting to add a Google OpenID login ...
8
votes
1answer
223 views

No way to login with stack exchange on askubuntu.com? [duplicate]

I just noticed that I'm not logged in on askubuntu.com and here's my login page: What do I click to just use my connected StackExchange account?
8
votes
1answer
228 views

Stack Exchange Facebook OpenID login issue

I was trying to search for an old message in my inbox on Stack Overflow and clicked on all Items link which redirected me to https://stackexchange.com/users/login which displays the following ...
8
votes
1answer
586 views

Two ways to join a community; why is one more complex than the other?

I have a StackExchange login that I use for all the communities that I'm a member of. If I visit a community that I am not a member of, the title bar shows a link. Clicking it brings up a "CONFIRM ...
8
votes
1answer
1k views

Cannot login to Area 51 [duplicate]

When I attempt to login to Area 51, with the Stack Exchange OpenID, it gives me the following error: Unable to log in with your OpenID provider: The openid.return_to parameter (http://area51....
7
votes
1answer
1k views

Should changing your password invalidate all existing logins?

Last night I changed the password for my Stack Exchange OpenID. As a security precaution, I would expect that all of my sessions be invalidated and to be asked to log in again on all sites where I use ...
7
votes
1answer
72 views

Deleted “Real Name” returns after logging in on mobile site

In my profile, I had once entered a real name and after some time I decided to delete it. On my PC in my profile I clicked edit and deleted the name and it stopped showing up. However, every now and ...
7
votes
1answer
177 views

Why do I have to enter my password to log in?

Using the Stack Exchange login, why do I have to enter my password again and again to log in? Wasnā€™t the whole purpose of OpenID to do away with this? This doesnā€™t even only happen when visiting a ...
7
votes
1answer
95 views

Bugs in sign-up procedure, SPF and link encoding

I created an account (as in, I don't use a third party openid provider). I encountered two bugs in this process. First, the confirmation mail was recognized as spam by my provider, with "From SPF ...
7
votes
0answers
87 views

What do I need to correctly request chat websocket auth?

I'm (attempting) to build an SE chat library in Ruby, since it's one of the few languages that doesn't yet seem to have one (Brainf**k, anyone?). As part of that, I need to make a request to http://...
6
votes
2answers
71 views

Logging out from Stack Exchange does not work [duplicate]

The "log out" functionality of Stack Exchange appears to be broken. You can reproduce this with the following steps: Logging in: Click "log in" on the top bar Click "log in with Stack Exchange" ...
6
votes
2answers
117 views

Why is the Stack Exchange OpenID option expanded upon signup?

Today I got a support email from someone asking why they needed to establish a password in order to post questions. My first thought was that they were asking about some other site since we delegate ...
6
votes
1answer
58 views

Bug related to error message “identifier not owned by the logged in user”

I tried to register on http://www.commandlinefu.com/users/openid with my Stack Exchange OpenID. It logged me in, but not completely. The full error message is: Detected an attempt to send an ...
6
votes
1answer
110 views

No CAPTCHA when registering new Stack Exchange OpenID account

When registering new Stack Exchange OpenID account, it says: Enter a valid email and solve the CAPTCHA, and we'll send you a link to create an account Emphasis mine. Only problem is... there is no ...

1
2 3 4