oauth 2.0 - Google oAuth2 & OpenId without Gplus button (Java) -


i'd create web-application in java uses google services both initial authentication , api calls. (e.g. google calendar)

i want stay away google apps engine, because of overhead creates , because of requirements gae project. next want avoid google plus login button, because isn't custom brandable.

for authentication i'd use openid , access google api's i'd use oauth2.

currently have working project using recent oauth2 lib , code : https://code.google.com/p/google-api-java-client/wiki/oauth2

i'm using light-weight openid library jopenid openid authentication.

the combination can used succesfully authenticate, have 2 main concerns:

  • jopenid not actively maintained on 2 years. authentication mechanism outdated , incomplete (based on issue section of project)
  • in authentication process, users needs select google account , grant permissions twice. confusing user , can problem if user selects 2 different accounts in process.

i've looked @ step2 (http://code.google.com/p/step2/) hybrid solution combine oauth2 , openid, project bloated big openid4java library, gae stuff , uses maven dependencies not online anymore (e.g. guice)

are there other, cleaner, solutions meet project requirements? (preferably library can combine openid , oauth2, , still maintained)


Comments

Popular posts from this blog

monitor web browser programmatically in Android? -

Shrink a YouTube video to responsive width -

wpf - PdfWriter.GetInstance throws System.NullReferenceException -