41
votes
Accepted
How does one Stack Exchange site know that I'm logged in to the other?
Once you get authenticated on a single site, the full.js gets loaded, which has a function UniversalAuth.performAuth() which gets called.
That function starts with an XMLHttpRequest POST to /users/...
- 86.2k
19
votes
Accepted
Will Google+ APIs shutting down affect signing in into Stack Exchange sites?
The Google+ API shutdown will not affect our login system at all. We have already been using the generic Google OAuth2 API for some time, which is a completely independent API and is not being ...
- 189k
15
votes
Authenticate to Stack Exchange using GitHub
The PR was finally approved and merged: https://stackoverflow.blog/2019/11/11/announcing-support-for-github-authentication-in-stack-overflow/
- 49k
15
votes
Did something change with Stack Exchange's cross-domain login process? (no longer working)
Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept.
In my answer on How does one Stack Exchange site know that I'm logged in to the other? I ...
- 86.2k
9
votes
Accepted
Is stackauth.com still in use?
Ah yeah, that write-up should be updated since we no longer do any of that. We stopped when universal login was rolled out, so... January 2016 or thereabouts.
The last remaining auth-related feature ...
- 159k
8
votes
Accepted
Don't tell me which of my credentials is wrong
I've asked internally, and it seems that this is currently "by design" rather than accidental, and that initially it was implemented the way you would prefer. As such, it is trying to strike a balance ...
- 93.1k
7
votes
Did something change with Stack Exchange's cross-domain login process? (no longer working)
I can confirm that nothing changed on our end in this area. And I can endorse rene's answer:
Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept.
...
- 61.7k
5
votes
Enable two-step verification for all Stack Exchange sites
I wish to enable 2-step auth for all my stack exchange sites. How would I do that?
Use your Google account as your OpenID provider. Setup 2FA in Google.
Or use whatever other OpenID provider you ...
- 3,012
5
votes
Question based on Authentication
But when I am generating an access token through Postman, it is asking for user approval, but I don't need it.
You do need it; an access token identifies the user. Without an approval step, I could ...
GlorfindelMod
- 248k
4
votes
Accepted
What scope to supply to get a refresh token from Stack Exchange?
Disclaimer: I'm not a Stack Exchange employee, but I'm a frequent user of the API and moderator on Stack Apps.
You've read the documentation, kudos for that, and as you saw, it does not have the ...
GlorfindelMod
- 248k
4
votes
Accepted
SEDE login authentication
The Stack Exchange Data Explorer is...
...an open source tool for running arbitrary queries against public data from the Stack Exchange network. Features include collaborative query editing for all ...
GlorfindelMod
- 248k
4
votes
Support logging in with Apple
You missed one option that is also available and only sell you out to Stack Overflow: create an account on Stack Exchange itself.
If privacy is a concern then adding Apple as login a provider seems a ...
- 86.2k
4
votes
How can I "authenticate" my Stack Exchange API app without OAuth authenticating it?
Logging in is not required to get a higher quota, just providing the application key is enough. The current version of the documentation says:
After that, applications are sorted into two distinct ...
GlorfindelMod
- 248k
4
votes
Accepted
Authentication API - port number in redirect_uri is ignored
As of the last build, ports in return redirect_uris should be preserved.
In some cases the port will be stripped, but that should only happen if the port matches the default for the protocol.
- 60.1k
3
votes
Accepted
Can't remove applications
Thanks for the report Andre - this should be fixed and deployed network wide.
- 49k
3
votes
Using oAuth in API throwing internal server error
Today I learned an exciting new deficiency in ASP.NET MVC <= 5; child actions cannot be asynchronous -_-
A fix has been deployed.
This bug was introduced as part of some work underway that ...
- 60.1k
3
votes
Accepted
API authentication channelUrl from a userscript?
SE's Javascript SDK assumes that you have your own domain and that everything is same-domain. The SDK has code like:
// proxyUrl must be under the currently hosting domain
if (proxyUrl.toLowerCase()....
- 20.6k
2
votes
Cannot login using Google authentication
Appears to be temporary problem with Google auth as login from both desktop and mobile browsers did not work. Now I'm able to login from both.
- 49
Only top scored, non community-wiki answers of a minimum length are eligible