Questions tagged [stack-exchange-openid]
Stack Exchange's own OpenID provider, used for "log in with Stack Exchange" and potentially used for logging into other OpenID consumers.
187
questions
208
votes
29
answers
31k
views
Support for OpenID ended on July 25, 2018
NOTE: Signing up or Logging in via OpenID is no longer officially supported from any of our sites. Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of ...
- 16.4k
120
votes
1
answer
1k
views
Security hole: password change dialog doesn't ask for a user's current password
NB: Not asking for a current password allows an attacker who has somehow hijacked current session's cookies to hijack the account as well, in direct contravention of OWASP Guideline AT-011
What ...
- 7,339
113
votes
4
answers
3k
views
Can Stack Overflow change the password criteria?
Why the crazy password requirements? It a Q&A site, and I have to conform to arbitrarily chosen password complexity criteria.
With a 22 random lowercase characters (entropy 119 bits), the create ...
- 1,309
112
votes
4
answers
18k
views
How do I change the email address associated with my Stack Exchange OpenID? [duplicate]
I registered my Stack Overflow account using the Stack Exchange OpenID provider. I later changed my e-mail, but I cannot change the e-mail address associated with my OpenID for some reason. Why is ...
- 1,343
89
votes
1
answer
17k
views
How can I change my Stack Exchange login email? [duplicate]
I have already changed my email via one of Stack Exchange's sites, and it has been changed on all other sites as well. However, I can only log in with my old email address.
I don't use any third-...
- 1,487
80
votes
10
answers
3k
views
If we built two-factor authentication for Stack Exchange OpenID, would you use it? [closed]
We've decided that we won't be working on this project. Sorry to all the people who were in favour of it.
[Related: Two factor authentication for Stack Exchange]
So, over the last couple of weeks, I ...
- 4,928
43
votes
2
answers
697
views
Can't login with Stack Exchange OpenID when HTTPS-Everywhere plugin is active - apparent protocol mismatch
I can't seem to log in with my Stack Exchange OpenID. When I try, I get the error message:
Unable to log in with your OpenID provider:
The openid.return_to parameter (https://unix....
- 8,847
41
votes
2
answers
686
views
Is the Stack Overflow login secure against enumeration attacks?
I just noticed that when you
go to https://stackoverflow.com/users/login#log-in
pick "Stack Exchange"
enter any email address
submit the form without entering a password
you will get a message like "...
- 383
36
votes
2
answers
389
views
StackExchange OpenID provider should clearly use HTTPS
As discussed in this question on Meta.Security.SE, the SE OpenID provider seems to be using some sort of AJAX call to replace part of the page. The outer page uses plain HTTP, whereas the OpenID part (...
- 783
31
votes
1
answer
918
views
Option to add a Stack Exchange Login to Existing Account has gone AWOL
When I was trying to help this user, I noticed that there is no "Sign Up" or "Login" option for a Stack Exchange account when you are already signed in. I know it used to be there, what happened to ...
- 30.9k
24
votes
5
answers
2k
views
Stack Exchange OpenID credentials not removed on logout, allowing insecure re-login
The cookies for subdomain, 'openid.stackexchange.com' are not, as claimed, actually removed from the browser upon logging out of stackexchange.com, but they should be.
Applies to:
* stackexchange.com,...
- 464
22
votes
1
answer
972
views
How can I add a Stack Exchange login to my preexisting account? [duplicate]
When I created my account, I used Facebook Connect as my only login type and I can only log in to my account using it.
I wish to create a Stack Exchange login to be able to log in with instead of ...
- 387
21
votes
2
answers
164
views
Make clear in the logon screen you can log in with your SE account
Some people don't really understand how to log on with your SE account in the new logon screen.
And although it might be obvious to most of us, some people find the new dialog hard to understand.
...
- 90.6k
21
votes
1
answer
301
views
Improve SE OpenID logout security and user experience on shared or public machines
In May, Stack Exchange became an OpenID provider. It's now the first available choice when creating a new account on an SE site. When selecting it, you're offered a well-integrated login and ...
- 13.2k
20
votes
0
answers
249
views
Tell me how to log out of Stack Exchange OpenID
I've logged in to my account using Stack Exchange OpenID. That is, I just clicked the "log in" link in the top bar, and typed in my e-mail address and password.
When I now want to log out again, ...
- 30.9k
19
votes
3
answers
343
views
Don't give away incorrect password/username info
I don't think it's safe or even good practice to tell a user specifically what part of my authentication credentials is faulty. I practically guessed my way to my correct username because SO let me ...
- 582
18
votes
1
answer
126
views
Can we please get text labels for the new OpenID registration form?
First off, I am quite pleased to see that Stack Exchange is now an OpenID provider. I see this as a very good thing for not only Stack Exchange but also the sites that will now be inspired to add ...
- 21.2k
17
votes
0
answers
174
views
What is the 10.7.2.15 entry in the history log of my SE Open ID account? [duplicate]
I'm asking this question on behalf of my second account: KennyBOT
KennyBOT uses a Stack Exchange account and therefore logs in with the Stack Exchange Open ID provider which enables users to see ...
- 81.1k
15
votes
1
answer
201
views
Unable to login into Stack Exchange Data Explorer
It might be related to the recent SEDE outage but I'm unable to login to SEDE via Stack Exchange Open ID. When clicking the 'Log in using Stack Exchange' button, I get an error message
No OpenID ...
GlorfindelMod
- 222k
14
votes
3
answers
766
views
Why is my StackExchange OpenID so hard to find? [closed]
With the new login process in meta.SO, I would prefer to login manually via my OpenID rather than enter my username/password combo. As a result, I was looking for my StackExchange OpenID URL, and only ...
- 1,795
14
votes
1
answer
154
views
Is it possible to make signing up gracefully fail over to logging in if the SE OpenID account exists?
For most OpenID options, it doesn't much matter if you pick the "Sign up" versus the "Log in" tab on the sign in page. Whether you have an account on the site or not, it just does the right thing. ...
- 75.2k
13
votes
2
answers
223
views
Logging into Ask LibreOffice with my Stack Exchange OpenID
If I'm on http://ask.libreoffice.org/en/account/signin/?next=/en/, I click on OpenID and then enter https://openid.stackexchange.com and click Log In, I get a page that says:
An error occurred on the ...
- 243
12
votes
2
answers
632
views
Log in to Disqus with StackExchange OpenID
Disqus shows three fields on their login page: "Username or Email", "Password", and "OpenID URL". If you put https://openid.stackexchange.com into "OpenID URL" (...
- 223
12
votes
2
answers
150
views
What information does Stack Overflow collect when signing in with OpenID?
What exact information does Stack Overflow collect when signing in with OpenID?
user196793
11
votes
2
answers
683
views
Will you loosen password requirements on StackExchange accounts? [duplicate]
Possible Duplicate:
Can Stack Overflow change the password criteria?
The StackExchange account passwords requirements are quite onerous, arbitrary, and undocumented, particularly the requirement of ...
- 5,900
11
votes
1
answer
252
views
No way to login with stack exchange on askubuntu.com? [duplicate]
I just noticed that I'm not logged in on askubuntu.com and here's my login page:
What do I click to just use my connected StackExchange account?
- 727
11
votes
1
answer
162
views
Logging in with a StackExchange account causes IE8 to go catatonic
When I first signed up for Drupal Answers, instead of my normal MyOpenID identity I created a StackExchange account -- by "mistake" since I somehow missed the MyOpenID option.
I've since signed ...
- 515
11
votes
0
answers
108
views
Is it possible to merge an old and new data.SE login?
Today I tried to log in on https://data.stackexchange.com/ using my regular Yahoo account but was unable to. I get:
No OpenID endpoint found.
When I log in using the Stack Exchange option I get a ...
- 4,518
11
votes
1
answer
136
views
What are the plans regarding OpenID / OpenID Connect?
The OpenID protocol that is used by Stack Exchange websites has been obsolete for a while.
Is it going to be upgraded to something that is not obsolete? OpenID Connect comes to mind.
- 695
10
votes
1
answer
354
views
Area 51 login failure with HTTPS Everywhere
I could not log in to Area 51 in Chrome 62 under Linux. After entering my credentials and authenticating to my OpenID provider (Stack Exchange), I was redirected back to https://area51.stackexchange....
10
votes
1
answer
686
views
Unable to log in with your OpenID provider: Message signature was incorrect on Area51 only
I have registered to meta.stackexchange.com successfully, I was also able to Sign Up on superuser fine using the same credentials.
However when I tried to log in with Stack Exchange details at Area51,...
- 139
10
votes
1
answer
195
views
Seamless account creation on StackExchange sites
If try to create an account in any StackExchange site, you will be presented with a signup page, which has Google, Facebook, and StackExchange as signup options.
When you choose and click Google/...
- 402
10
votes
0
answers
196
views
What is the status of the removal process of Stack Exchange OpenID?
Back in October 26th 2018, SE project manager wrote:
Currently, https://openid.stackexchange.com/ is still on the internet, but we are in the process of completely removing it
It's still on the ...
10
votes
0
answers
783
views
Why can I not finish sign up? [closed]
I always have this thing at the top of the screen next to my name that says "finish signup".
So, I click on it, and see what happens. I get to this screen, and I enter a password.
After I do ...
- 209
10
votes
0
answers
113
views
Add "Create" option to the StackExchange OpenID login page
After reading the blog entry announcing the StackExchange OpenID provider, I was anxious to add a StackExchange login to my account for redundancy. I went to update my account and clicked on the new ...
- 6,380
9
votes
1
answer
160
views
Switch from OpenID to a Stack Exchange login
When I started using Stack Exchange sites several years ago, I logged in using Google since I wasn't sure I wanted yet another login. Well, at this point I value my Stack Exchange identity ...
- 193
9
votes
1
answer
86
views
Logging in with Stack Exchange OpenID from the "Ask Question" page cause the question to be lost
I recently prepped a question on a site which I had not yet created an account on. After preparing the question and clicking 'Log in', I logged in as normal, but then was prompted to create the new ...
- 421
9
votes
1
answer
794
views
Two ways to join a community; why is one more complex than the other?
I have a StackExchange login that I use for all the communities that I'm a member of. If I visit a community that I am not a member of, the title bar shows a link. Clicking it brings up a "CONFIRM ...
- 441
9
votes
0
answers
2k
views
How can I change my login email address for Stack Overflow? [duplicate]
How can I change my login email address for Stack Overflow?
I tried editing from my account, but that didn't work if I used that email during login.
user247819
8
votes
1
answer
582
views
How do I add a Google OpenID login?
Apologies in advance if this question is all over the place. I have no idea how OpenID works and how SE's various login systems are related to eachother.
I am attempting to add a Google OpenID login ...
- 25.3k
8
votes
1
answer
238
views
Stack Exchange Facebook OpenID login issue
I was trying to search for an old message in my inbox on Stack Overflow and clicked on all Items link which redirected me to https://stackexchange.com/users/login which displays the following ...
8
votes
1
answer
1k
views
Cannot login to Area 51 [duplicate]
When I attempt to login to Area 51, with the Stack Exchange OpenID, it gives me the following error:
Unable to log in with your OpenID provider:
The openid.return_to parameter (http://area51....
- 734
8
votes
0
answers
362
views
How can I see which devices are actively logged into Stack Exchange account?
The user page of Stack Exchange Open ID gives login history of Stack Exchange as well as Open ID, but it registers logout history of only Open ID and not of Stack Exchange.
Is there any way to see the ...
- 181
8
votes
0
answers
94
views
What do I need to correctly request chat websocket auth?
I'm (attempting) to build an SE chat library in Ruby, since it's one of the few languages that doesn't yet seem to have one (Brainf**k, anyone?).
As part of that, I need to make a request to http://...
- 35.9k
7
votes
1
answer
2k
views
Should changing your password invalidate all existing logins?
Last night I changed the password for my Stack Exchange OpenID. As a security precaution, I would expect that all of my sessions be invalidated and to be asked to log in again on all sites where I use ...
- 851
7
votes
1
answer
73
views
Deleted "Real Name" returns after logging in on mobile site
In my profile, I had once entered a real name and after some time I decided to delete it. On my PC in my profile I clicked edit and deleted the name and it stopped showing up.
However, every now and ...
- 173
7
votes
1
answer
181
views
Why do I have to enter my password to log in?
Using the Stack Exchange login, why do I have to enter my password again and again to log in? Wasn’t the whole purpose of OpenID to do away with this?
This doesn’t even only happen when visiting a ...
- 11.7k
7
votes
1
answer
95
views
Bugs in sign-up procedure, SPF and link encoding
I created an account (as in, I don't use a third party openid provider). I encountered two bugs in this process. First, the confirmation mail was recognized as spam by my provider, with "From SPF ...
- 189
7
votes
0
answers
90
views
Can't log in with Stack Exchange OpenID after clicking "Google"
This appears to be sorta the reverse of this older bug: if I click the "Google" button by mistake and then go back to fill in my credentials, the page assumes I'm trying to log in with ...
- 434k
6
votes
2
answers
73
views
Logging out from Stack Exchange does not work [duplicate]
The "log out" functionality of Stack Exchange appears to be broken. You can reproduce this with the following steps:
Logging in:
Click "log in" on the top bar
Click "log in with Stack Exchange"
...
- 163