Geek asks and answers

A google login always asks for user consent

I have an internal web application for my company that uses login with Google authentication system. It works well for the most part, they can authenticate with Google, give consent to my application to access the main user data, and then when they are returned to my application, I can really get their user details.

The problem is that I thought that if they give their consent, they won’t have to do it every time. Is this a false assumption? As it is now, every time they click "login with google", they should give consent, and not redirect back to my application.

I am using PHP (codeigniter) and a pretty good Oauth lib found on github (fork of phil sturgeon library). Is there any parameter that I have to pass so that the user cannot give consent every time after the first time?

+5
source share
1 answer

Logging in to Google does not require user consent each time. If you use the OAuth2 login procedure, you can log in a second time without reapplying: https://developers.google.com/accounts/docs/OAuth2Login

However, in some contexts, automatic approval may be disabled, with the subsequent requirement of user consent at each login.

, Google . , ( , , ) " = " , "_ = ". ( ), , , .

, URL- "localhost" URL-, DNS. Google Google cookie accounts.google.com, , _this_device_ foo ( ); Google , cookie. , "localhost" ( URL-, DNS) . , , cookie , URL-, , . , ( , ), accounts.google.com. cookie.

+15

More articles:


All Articles