diff --git a/Sample-Static-Configuration-for-using-Google-Authentication.md b/Sample-Static-Configuration-for-using-Google-Authentication.md new file mode 100644 index 0000000..d07746f --- /dev/null +++ b/Sample-Static-Configuration-for-using-Google-Authentication.md @@ -0,0 +1,72 @@ +Google has a couple non-standard behaviors that had to be addresses as a special case, thus you can't really use all the types of server configurations, and will be limited to Hybrid or Static where Google is setup in a particular way. + +The following example is based on making the sample simple-web-app to work with a Static configuration that uses Google Authentication, one can extrapolate from this to get a Hybrid configuration working. The updates shown here were done to the src/main/webapp/WEB-INF/spring/appServlet/servlet-context.xml file (see ). + +1. Set the Authentication Filter to use your configurations, in this sample Static configurations: + ``` xml + + + + + + + + + + ``` + +1. Setup your issuer to be "Google". Not the effect of this on the simple client is that it will basically ignore anything you type on the entry box during Login. + ``` xml + + + + ``` + +1. Configure the Google Server entry to use the OAuth2.0/OIDC endpoints Google uses. This is where the non-standard behaviors are addressed. The "issuer" is not prefixed with "https://" and thus a static configuration is needed, and Google processing does not ignore the "nonce" parameter, which required the audition of the "nonceEnabled" property. + ``` xml + +     +        +           +              +                 +                 +                 +                 +                 +                 +              +           +        +     + + ``` + +1. Finally, you must configure your client to work with Google requirements. Replace anything called "my-*" with your actual values, obtained from your Google API via the Google Developers Console. + ``` xml + + + + + + + + + + openid + email + profile + + + + + + https://my-redirect-uri-setup-in-google/ + + + + + + + + ``` \ No newline at end of file