What to use on GoogleSignInOptions, requestIdToken or requestServerAuthCode, to achieve Authorization code...











up vote
0
down vote

favorite












I have implementing the Android Google authentication using google.android.gms.auth.



In the setting for GoogleSignInOptions I used till now requestIdToken, with the understanding that this implements OAuth2 Authorization Code flow. This means that it should be using what is known in OAuth2 RFC as response_type=code, code-based that later is validated in the backed.



But digging more into this, I just saw that there is another option requestServerAuthCode, and by looking at it is closer to what I thought I am doing.



Which of these achieves OAuth2 Authorization Code Flow?



Thanks!






android google-oauth2 google-authentication android-authenticator







share|improve this question




























    up vote
    0
    down vote

    favorite












    I have implementing the Android Google authentication using google.android.gms.auth.



    In the setting for GoogleSignInOptions I used till now requestIdToken, with the understanding that this implements OAuth2 Authorization Code flow. This means that it should be using what is known in OAuth2 RFC as response_type=code, code-based that later is validated in the backed.



    But digging more into this, I just saw that there is another option requestServerAuthCode, and by looking at it is closer to what I thought I am doing.



    Which of these achieves OAuth2 Authorization Code Flow?



    Thanks!






    android google-oauth2 google-authentication android-authenticator







    share|improve this question


























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      I have implementing the Android Google authentication using google.android.gms.auth.



      In the setting for GoogleSignInOptions I used till now requestIdToken, with the understanding that this implements OAuth2 Authorization Code flow. This means that it should be using what is known in OAuth2 RFC as response_type=code, code-based that later is validated in the backed.



      But digging more into this, I just saw that there is another option requestServerAuthCode, and by looking at it is closer to what I thought I am doing.



      Which of these achieves OAuth2 Authorization Code Flow?



      Thanks!






      android google-oauth2 google-authentication android-authenticator







      share|improve this question















      I have implementing the Android Google authentication using google.android.gms.auth.



      In the setting for GoogleSignInOptions I used till now requestIdToken, with the understanding that this implements OAuth2 Authorization Code flow. This means that it should be using what is known in OAuth2 RFC as response_type=code, code-based that later is validated in the backed.



      But digging more into this, I just saw that there is another option requestServerAuthCode, and by looking at it is closer to what I thought I am doing.



      Which of these achieves OAuth2 Authorization Code Flow?



      Thanks!






      android google-oauth2 google-authentication android-authenticator




      android google-oauth2 google-authentication android-authenticator






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 5 at 3:40

























      asked Nov 5 at 2:00









      user3053247

      232413




      232413
























          1 Answer
          1






          active

          oldest

          votes

















          up vote
          0
          down vote













          With the ID token flow, you're only using Google Sign In to obtain the identity of the user. See https://android-developers.googleblog.com/2016/01/using-google-sign-in-with-your-server.html.



          To use authorization codes, typically with your server, see https://android-developers.googleblog.com/2016/02/using-credentials-between-your-server.html






          share|improve this answer





















            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














             

            draft saved


            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53147373%2fwhat-to-use-on-googlesigninoptions-requestidtoken-or-requestserverauthcode-to%23new-answer', 'question_page');
            }
            );

            Post as a guest


















            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes








            up vote
            0
            down vote













            With the ID token flow, you're only using Google Sign In to obtain the identity of the user. See https://android-developers.googleblog.com/2016/01/using-google-sign-in-with-your-server.html.



            To use authorization codes, typically with your server, see https://android-developers.googleblog.com/2016/02/using-credentials-between-your-server.html






            share|improve this answer

























              up vote
              0
              down vote













              With the ID token flow, you're only using Google Sign In to obtain the identity of the user. See https://android-developers.googleblog.com/2016/01/using-google-sign-in-with-your-server.html.



              To use authorization codes, typically with your server, see https://android-developers.googleblog.com/2016/02/using-credentials-between-your-server.html






              share|improve this answer























                up vote
                0
                down vote










                up vote
                0
                down vote









                With the ID token flow, you're only using Google Sign In to obtain the identity of the user. See https://android-developers.googleblog.com/2016/01/using-google-sign-in-with-your-server.html.



                To use authorization codes, typically with your server, see https://android-developers.googleblog.com/2016/02/using-credentials-between-your-server.html






                share|improve this answer












                With the ID token flow, you're only using Google Sign In to obtain the identity of the user. See https://android-developers.googleblog.com/2016/01/using-google-sign-in-with-your-server.html.



                To use authorization codes, typically with your server, see https://android-developers.googleblog.com/2016/02/using-credentials-between-your-server.html







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 6 at 4:01









                user2705223

                1773




                1773






























                     

                    draft saved


                    draft discarded



















































                     


                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53147373%2fwhat-to-use-on-googlesigninoptions-requestidtoken-or-requestserverauthcode-to%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest






































































                    -

                    這個網誌中的熱門文章

                    Academy of Television Arts & Sciences

                    圖片
                    American television organization Academy of Television Arts & Sciences Founded 1946 ; 73 years ago  ( 1946 ) Location North Hollywood, California, United States Area served Television industry Product Emmy Awards Key people Frank Scherma ( Chairman and CEO ) Website televisionacademy.com [redirects to emmys.com , official website of the Emmys and the Television Academy The Academy of Television Arts & Sciences ( ATAS ), also colloquially known as the Television Academy , is a professional honorary organization dedicated to the advancement of the television industry in the United States. Founded in 1946, the organization presents the Primetime Emmy Awards, an annual ceremony honoring achievement in U.S. primetime television. Contents 1 History 2 Emmy Award 3 Publications and programs 4 Current governance 4.1 Board of Governors 5 Television Academy honors 5.1 1st Annual (2008) 5.2 2nd Annual (2009)...
                    閱讀完整內容

                    L'Équipe

                    圖片
                    For other uses, see Équipe (disambiguation). L'Équipe The front page of L'Équipe on 4 July 2011 Type Daily newspaper Format Tabloid Owner(s) Éditions Philippe Amaury Editor François Morinière Editor-in-chief Fabrice Jouhaud Founded 1946 Language French Headquarters Boulogne-Billancourt ISSN 0153-1069 Website www.lequipe.fr L'Équipe ( pronounced  [lekip] , French for "the team") is a French nationwide daily newspaper devoted to sport, owned by Éditions Philippe Amaury. The paper is noted for coverage of association football , rugby, motorsport and cycling. Its predecessor was L'Auto , a general sports paper whose name reflected not any narrow interest but the excitement of the time in car racing. L'Auto originated the Tour de France cycling stage race in 1903 as a circulation booster. The race leader's yellow jersey (French: maillot jaune ) was instituted in 1919, probably to reflect the dist...
                    閱讀完整內容

                    1995 France bombings

                    圖片
                    This article is a rough translation from French . It may have been generated by a computer or by a translator without dual proficiency. Please help to enhance the translation. The original article is under "français" in the "languages" sidebar. See this article's entry on Pages needing translation into English for discussion. 1995 France bombings Part of Algerian Civil War (spillover) Plaque commemorating the victims of the Saint-Michel station bombing on 25 July 1995 Location Paris and Lyon, France Date 25 July 1995  ( 1995-07-25 ) – 17 October 1995  ( 1995-10-17 ) Weapons Improvised explosive devices, school bombing Deaths 8 Non-fatal injuries 157 Perpetrator Armed Islamic Group Motive To induce the French government to withdraw support from the Algerian government during the Algerian Civil War The 1995 bombings in France were carried out by the Armed Islamic Group (GIA), who were broadening the Alger...
                    閱讀完整內容