68
votes
"OpenID 2.0 for Google Accounts is going away"; will this affect Stack Exchange?
Stack Exchange already uses the OAuth 2.0 APIs to log you using a Google account; note the URL in those screenshots. You can also verify this by logging in with a Google account, the login screen URL ...
- 101k
39
votes
Accepted
How does one Stack Exchange site know that I'm logged in to the other?
Once you get authenticated on a single site, the full.js gets loaded, which has a function UniversalAuth.performAuth() which gets called.
That function starts with an XMLHttpRequest POST to /users/...
- 81.1k
19
votes
Accepted
Will Google+ APIs shutting down affect signing in into Stack Exchange sites?
The Google+ API shutdown will not affect our login system at all. We have already been using the generic Google OAuth2 API for some time, which is a completely independent API and is not being ...
- 184k
15
votes
Authenticate to Stack Exchange using GitHub
The PR was finally approved and merged: https://stackoverflow.blog/2019/11/11/announcing-support-for-github-authentication-in-stack-overflow/
- 48.5k
11
votes
Accepted
Where and how is the authentication cookie stored with the new authentication system?
Based on some experiments and code I have to log me in without using a browser seem to prove that the only cookie you need per site is the acct cookie from the domain .stackexchange.com:
Removing ...
- 81.1k
9
votes
Accepted
Is stackauth.com still in use?
Ah yeah, that write-up should be updated since we no longer do any of that. We stopped when universal login was rolled out, so... January 2016 or thereabouts.
The last remaining auth-related feature ...
- 155k
8
votes
Did something change with Stack Exchange's cross-domain login process? (no longer working)
Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept.
In my answer on How does one Stack Exchange site know that I'm logged in to the other? I ...
- 81.1k
8
votes
Accepted
Don't tell me which of my credentials is wrong
I've asked internally, and it seems that this is currently "by design" rather than accidental, and that initially it was implemented the way you would prefer. As such, it is trying to strike a balance ...
- 92.3k
6
votes
How is user information stored in ElasticSearch database of Stack Exchange network?
How is user information stored in the ElasticSearch database of the StackExchange network?
It pretty much isn't. We use ElasticSearch for... search. Of questions and answers, part of the information ...
- 153k
5
votes
Did something change with Stack Exchange's cross-domain login process? (no longer working)
I can confirm that nothing changed on our end in this area. And I can endorse rene's answer:
Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept.
...
- 57.3k
4
votes
Accepted
What scope to supply to get a refresh token from Stack Exchange?
Disclaimer: I'm not a Stack Exchange employee, but I'm a frequent user of the API and moderator on Stack Apps.
You've read the documentation, kudos for that, and as you saw, it does not have the ...
GlorfindelMod
- 221k
4
votes
Accepted
SEDE login authentication
The Stack Exchange Data Explorer is...
...an open source tool for running arbitrary queries against public data from the Stack Exchange network. Features include collaborative query editing for all ...
GlorfindelMod
- 221k
4
votes
Support logging in with Apple
You missed one option that is also available and only sell you out to Stack Overflow: create an account on Stack Exchange itself.
If privacy is a concern then adding Apple as login a provider seems a ...
- 81.1k
4
votes
Accepted
Authentication API - port number in redirect_uri is ignored
As of the last build, ports in return redirect_uris should be preserved.
In some cases the port will be stripped, but that should only happen if the port matches the default for the protocol.
- 59.7k
4
votes
How can I "authenticate" my Stack Exchange API app without OAuth authenticating it?
Logging in is not required to get a higher quota, just providing the application key is enough. The current version of the documentation says:
After that, applications are sorted into two distinct ...
GlorfindelMod
- 221k
4
votes
Enable two-step verification for all Stack Exchange sites
I wish to enable 2-step auth for all my stack exchange sites. How would I do that?
Use your Google account as your OpenID provider. Setup 2FA in Google.
Or use whatever other OpenID provider you ...
- 2,932
4
votes
Accepted
Join this Community bug on Area51
Thanks for catching this! I'm pushing a fix and it will go live in the next build.
As a bonus, I'm also removing the "sign up" link from Area 51 Discuss since that also doesn't exist on Area 51 quite ...
- 155k
3
votes
Accepted
API authentication channelUrl from a userscript?
SE's Javascript SDK assumes that you have your own domain and that everything is same-domain. The SDK has code like:
// proxyUrl must be under the currently hosting domain
if (proxyUrl.toLowerCase()....
- 20.4k
3
votes
Accepted
Unable to login to iOS beta using Facebook
This should be fixed. There was a problem with our Facebook app configuration on the server.
- 7,283
3
votes
Accepted
Can't remove applications
Thanks for the report Andre - this should be fixed and deployed network wide.
- 48.5k
3
votes
Using oAuth in API throwing internal server error
Today I learned an exciting new deficiency in ASP.NET MVC <= 5; child actions cannot be asynchronous -_-
A fix has been deployed.
This bug was introduced as part of some work underway that ...
- 59.7k
2
votes
Cannot login using Google authentication
Appears to be temporary problem with Google auth as login from both desktop and mobile browsers did not work. Now I'm able to login from both.
- 49
1
vote
Links between my SE accounts should bypass login
This could be accomplished with an authentication token similar to how O-Auth works.
- 259
Only top scored, non community-wiki answers of a minimum length are eligible