68 votes

"OpenID 2.0 for Google Accounts is going away"; will this affect Stack Exchange?

Stack Exchange already uses the OAuth 2.0 APIs to log you using a Google account; note the URL in those screenshots. You can also verify this by logging in with a Google account, the login screen URL ...
user avatar
39 votes
Accepted

How does one Stack Exchange site know that I'm logged in to the other?

Once you get authenticated on a single site, the full.js gets loaded, which has a function UniversalAuth.performAuth() which gets called. That function starts with an XMLHttpRequest POST to /users/...
user avatar
  • 81.1k
19 votes
Accepted

Will Google+ APIs shutting down affect signing in into Stack Exchange sites?

The Google+ API shutdown will not affect our login system at all. We have already been using the generic Google OAuth2 API for some time, which is a completely independent API and is not being ...
user avatar
  • 184k
15 votes

Authenticate to Stack Exchange using GitHub

The PR was finally approved and merged: https://stackoverflow.blog/2019/11/11/announcing-support-for-github-authentication-in-stack-overflow/
user avatar
  • 48.5k
11 votes
Accepted

Where and how is the authentication cookie stored with the new authentication system?

Based on some experiments and code I have to log me in without using a browser seem to prove that the only cookie you need per site is the acct cookie from the domain .stackexchange.com: Removing ...
user avatar
  • 81.1k
9 votes
Accepted

Is stackauth.com still in use?

Ah yeah, that write-up should be updated since we no longer do any of that. We stopped when universal login was rolled out, so... January 2016 or thereabouts. The last remaining auth-related feature ...
user avatar
  • 155k
8 votes

Did something change with Stack Exchange's cross-domain login process? (no longer working)

Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept. In my answer on How does one Stack Exchange site know that I'm logged in to the other? I ...
user avatar
  • 81.1k
8 votes
Accepted

Don't tell me which of my credentials is wrong

I've asked internally, and it seems that this is currently "by design" rather than accidental, and that initially it was implemented the way you would prefer. As such, it is trying to strike a balance ...
user avatar
  • 92.3k
6 votes

How is user information stored in ElasticSearch database of Stack Exchange network?

How is user information stored in the ElasticSearch database of the StackExchange network? It pretty much isn't. We use ElasticSearch for... search. Of questions and answers, part of the information ...
user avatar
  • 153k
5 votes

Did something change with Stack Exchange's cross-domain login process? (no longer working)

I can confirm that nothing changed on our end in this area. And I can endorse rene's answer: Yes, something did change. The browsers we all use got a bit more picky about which cookies they accept. ...
user avatar
  • 57.3k
4 votes
Accepted

What scope to supply to get a refresh token from Stack Exchange?

Disclaimer: I'm not a Stack Exchange employee, but I'm a frequent user of the API and moderator on Stack Apps. You've read the documentation, kudos for that, and as you saw, it does not have the ...
user avatar
  • 221k
4 votes
Accepted

SEDE login authentication

The Stack Exchange Data Explorer is... ...an open source tool for running arbitrary queries against public data from the Stack Exchange network. Features include collaborative query editing for all ...
user avatar
  • 221k
4 votes

Support logging in with Apple

You missed one option that is also available and only sell you out to Stack Overflow: create an account on Stack Exchange itself. If privacy is a concern then adding Apple as login a provider seems a ...
user avatar
  • 81.1k
4 votes
Accepted

Authentication API - port number in redirect_uri is ignored

As of the last build, ports in return redirect_uris should be preserved. In some cases the port will be stripped, but that should only happen if the port matches the default for the protocol.
user avatar
4 votes

How can I "authenticate" my Stack Exchange API app without OAuth authenticating it?

Logging in is not required to get a higher quota, just providing the application key is enough. The current version of the documentation says: After that, applications are sorted into two distinct ...
user avatar
  • 221k
4 votes

Enable two-step verification for all Stack Exchange sites

I wish to enable 2-step auth for all my stack exchange sites. How would I do that? Use your Google account as your OpenID provider. Setup 2FA in Google. Or use whatever other OpenID provider you ...
user avatar
  • 2,932
4 votes
Accepted

Join this Community bug on Area51

Thanks for catching this! I'm pushing a fix and it will go live in the next build. As a bonus, I'm also removing the "sign up" link from Area 51 Discuss since that also doesn't exist on Area 51 quite ...
user avatar
  • 155k
3 votes
Accepted

API authentication channelUrl from a userscript?

SE's Javascript SDK assumes that you have your own domain and that everything is same-domain. The SDK has code like: // proxyUrl must be under the currently hosting domain if (proxyUrl.toLowerCase()....
user avatar
3 votes
Accepted

Unable to login to iOS beta using Facebook

This should be fixed. There was a problem with our Facebook app configuration on the server.
user avatar
3 votes
Accepted

Can't remove applications

Thanks for the report Andre - this should be fixed and deployed network wide.
user avatar
  • 48.5k
3 votes

Using oAuth in API throwing internal server error

Today I learned an exciting new deficiency in ASP.NET MVC <= 5; child actions cannot be asynchronous -_- A fix has been deployed. This bug was introduced as part of some work underway that ...
user avatar
2 votes

Cannot login using Google authentication

Appears to be temporary problem with Google auth as login from both desktop and mobile browsers did not work. Now I'm able to login from both.
user avatar
  • 49
1 vote

Links between my SE accounts should bypass login

This could be accomplished with an authentication token similar to how O-Auth works.
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible