Bug #2286
closed
Gerrit uses deprecated OpenID 2.0 for Google Accounts
100%
Description
Sign-in with Google feature on Gerrit uses OpenID 2.0 for Google Accounts, which is deprecated and will be discontinued on Apr 20, 2015.
Updated by Junxiao Shi almost 11 years ago
Gerrit doesn't have a solution yet.
https://code.google.com/p/gerrit/issues/detail?id=2677
The question here is, when should be advise/help our developers to switch to a different authentication provider such as Yahoo?
Updated by Alex Afanasyev over 10 years ago
Should we consider github gerrit plugin? https://gerrit.googlesource.com/plugins/github/+/master/README.md
Updated by Davide Pesavento over 10 years ago
Alex Afanasyev wrote:
Should we consider github gerrit plugin? https://gerrit.googlesource.com/plugins/github/+/master/README.md
For authentication? Yes, sure, much better than Yahoo.
Updated by Alex Afanasyev over 10 years ago
- Status changed from New to Resolved
- % Done changed from 0 to 100
I have updated and reconfigured gerrit. Now it uses OAuth authentication (with google and github).
When logging in using Google account, the previous openid account should be automatically linked. Github accounts for now should be linked manually.
Updated by Junxiao Shi over 10 years ago
I notice that OpenID button is gone without any notice/discussion.
Please re-enable OpenID for non-Google Accounts authentication.
Updated by Alex Afanasyev over 10 years ago
I see no reason to revert changes. Except you and me, all users are exclusively using googlw accoubt to log in into the system.
Updated by Junxiao Shi over 10 years ago
Is it feasible to support both OAuth and OpenID? Google always asks me to select which of the three accounts to use, which is annoying. OpenID is more convenient.
Updated by Alex Afanasyev over 10 years ago
This could be possible in the future (though not within definite timeline). Gerrit developers are working on providing hybring oauth/openid authentication support.
Updated by Junxiao Shi over 10 years ago
Re-enabling OpenID is split to #2661.
I have tested the automatic linking of Google Account authenticated with OpenID vs OAuth.
Please send notification to nfd-dev about this change, and after that this issue can be Closed.
Updated by Alex Afanasyev about 9 years ago
- Status changed from Resolved to Closed