Ausnahme gefangen: SSL certificate problem: certificate is not yet valid ๐Ÿ“Œ API Updates for Sign-In with Google

๐Ÿ  Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeitrรคge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden รœberblick รผber die wichtigsten Aspekte der IT-Sicherheit in einer sich stรคndig verรคndernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch รผbersetzen, erst Englisch auswรคhlen dann wieder Deutsch!

Google Android Playstore Download Button fรผr Team IT Security



๐Ÿ“š API Updates for Sign-In with Google


๐Ÿ’ก Newskategorie: Video
๐Ÿ”— Quelle: feedproxy.google.com

Posted by Laurence Moroney

With the release of Google Play services 8.3, we’ve made a lot of improvements to Sign-In with Google. In the first blog post of this ongoing series, we discussed the user interface improvements. Today, we will look further into the changes to the API to make building apps that Sign-In with Google easier than ever before.

Changes to basic sign in flow

When building apps that sign in with Google, you’ll notice that there are a lot of changes to make your code easier to understand and maintain.

Prior to this release, if you built an app that used Sign-In with Google, you would build one that attempted to connect to a GoogleApiClient. At this point the user was presented with an account picker and/or a permissions dialog, both of which would trigger a connection failure. You would have to handle these connection failures in order to sign in. Once the GoogleApiClient connected, then the user was considered to be signed in and the permissions could be granted. The process is documented in a CodeLab here.

Now, your code can be greatly simplified.

The process of signing in and connecting the GoogleApiClient are handled separately. Signing in is achieved with a GoogleSignInOptions object, on which you specify the parameters of the sign in, such as scopes that you desire. Here’s a code example:

 GoogleSignInOptions gso = new GoogleSignInOptions.Builder(GoogleSignInOptions.DEFAULT_SIGN_IN)  
     .requestEmail()  
     .build();  

Once you have a GoogleSignInOptions object, you can use it to configure the GoogleApiClient:

Here’s where your code will diverge greatly in the new API. Now, if you want to connect with a Google Account, instead of handling errors on the GoogleApiClient, you’ll instead use an intent that is initialized using the client.

Intent signInIntent = Auth.GoogleSignInApi.getSignInIntent(mGoogleApiClient);
startActivityForResult(signInIntent, RC_SIGN_IN);

Starting the intent will give you the account picker, and the scopes permission dialog if your GoogleSignInOptions requested anything other than basic scope. Once the user has finished interacting with the dialogs, an OnActivityResult callback will fire, and it will contain the requisite sign-in information.

 @Override  
 public void onActivityResult(int requestCode, int resultCode, Intent data) {  
   super.onActivityResult(requestCode, resultCode, data);  
   // Result returned from launching the Intent from GoogleSignInApi.getSignInIntent(...);  
   if (requestCode == RC_SIGN_IN) {  
     GoogleSignInResult result = Auth.GoogleSignInApi.getSignInResultFromIntent(data);  
     handleSignInResult(result);  
   }  
 }  

You can learn more about this code in the Integrating Google Sign-In quickstart, or by looking at the sample code.

Silent Sign-In

To further reduce friction for users in a multi-device world, the API supports silent sign in. In this case, if your user has given authorization to the app on a different device, the details will follow their account, and they don’t need to re-give them on future devices that they sign into, unless they deauthorize. An existing sign-in is also cached and available synchronously on the current device is available.

Using it is as simple as calling the silentSignIn method on the API.

OptionalPendingResult opr = 
      Auth.GoogleSignInApi.silentSignIn(mGoogleApiClient);

Then, you can check the isDone() method on the pending result -- and if it returns true, the user is signed in, and you can get their status from the PendingResult. If it isn’t then you have to wait for a callback with the SignInResult

 if (pendingResult.isDone()) {  
    doStuffWith(pendingResult.get());  
  } else {  
    // There's no immediate result ready, displays some progress indicator and waits for the  
    // async callback.  
    showProgressIndicator();  
    pendingResult.setResultCallback(new ResultCallback<GoogleSignInResult>() {  
      @Override  
      public void onResult(@NonNull GoogleSignInResult result) {  
        updateButtonsAndStatusFromSignInResult(result);  
        hideProgressIndicator();  
      }  
    });  
  }  

Customizing the Sign-In Button

When building apps that Sign-In with Google, we provide a SignInButton object that has the Google branding, and which looks like this:


You can customize this button with a number of properties and constants that are documented in the API here.

The branding guidelines are available here, and they include versions of the buttons in PNG, SVG, EPS and other formats in many resolutions, including all the different states of the button. These files may be used for localization of the button, and if you need to match the style of the button to your app, guidelines are provided.

This only deals with the Android side of your app. You’ll likely have a server back end, and you may want to use the credentials on that securely.

In the next blog post, we’ll discuss how to use Sign-In with Google in server-side scenarios, including how to securely pass your credentials to your own server, and how to use Google back-end services, such as Google Drive, with the permission and credentials from users.

...













๐Ÿ“Œ TIBCO FTP Community Edition up to 6.5.0 on Windows Server/C API/Golang API/Java API/.Net API access control


๐Ÿ“ˆ 25.03 Punkte

๐Ÿ“Œ FedCM updates: Login Status API, Error API, and Auto-selected Flag API


๐Ÿ“ˆ 23.75 Punkte

๐Ÿ“Œ API Updates for Sign-In with Google


๐Ÿ“ˆ 23.58 Punkte

๐Ÿ“Œ API Updates for Sign-In with Google


๐Ÿ“ˆ 23.58 Punkte

๐Ÿ“Œ One-click loyalty sign ups/sign-ins with Google Pay | Demo


๐Ÿ“ˆ 22.71 Punkte

๐Ÿ“Œ One tap sign-up and automatic sign-in without password entry using Smart Lock


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ One tap sign-up and automatic sign-in without password entry using Smart Lock


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Single Sign-On bis 1.3.3/1.4.2 auf Cloud Foundry Single Sign-On service UI Cross Site Scripting


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Whatโ€™s new in sign-up and sign-in (Chrome Dev Summit 2019)


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Single Sign-On up to 1.3.3/1.4.2 on Cloud Foundry Single Sign-On service UI cross site scripting


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Did Everton sign Everton? Twitter hack blamed for soccer sign-up screwup


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Pomerium up to 0.13.3 Sign-in/Sign-out redirect


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Amazon Installs Sign in Warehouse Urging Workers Not to Sign Union Cards


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Fix: Sign-in Option Disabled Due to Failed Sign-in Attempts


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Handling OAuth 2 Sign-In and Sign-Up Distinctly with NextAuth.js


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ BBC iPlayer Sign-In Pair Your TV โ€“ How to Sign In on My BBC TV


๐Ÿ“ˆ 20.71 Punkte

๐Ÿ“Œ Google Sign-In with Google API C++ Client Integer denial of service


๐Ÿ“ˆ 20.61 Punkte

๐Ÿ“Œ Games authentication adopting Google Sign-In API


๐Ÿ“ˆ 18.61 Punkte

๐Ÿ“Œ Games authentication adopting Google Sign-In API


๐Ÿ“ˆ 18.61 Punkte

๐Ÿ“Œ Sign up now! Bing Maps Multi-Itinerary Optimization API Developer Webinar


๐Ÿ“ˆ 16.61 Punkte

๐Ÿ“Œ Twitter API outage blocks sign-ins, breaks most platform features


๐Ÿ“ˆ 16.61 Punkte

๐Ÿ“Œ CVE-2024-0733 | Smsot up to 2.12 HTTP POST Request /api.php data[sign] sql injection


๐Ÿ“ˆ 16.61 Punkte

๐Ÿ“Œ Chrome 70 Updates Sign-In Options, Patches 23 Flaws


๐Ÿ“ˆ 15.33 Punkte

๐Ÿ“Œ June Windows updates break Microsoft 365 sign-ins on Arm devices


๐Ÿ“ˆ 15.33 Punkte

๐Ÿ“Œ SDK Developers: sign up to stay up to date with latest tips, news and updates


๐Ÿ“ˆ 15.33 Punkte

๐Ÿ“Œ Die 1,- EUR Serie: Updates Updates Updates


๐Ÿ“ˆ 14.92 Punkte

๐Ÿ“Œ wp-google-maps Plugin up to 7.11.17 on WordPress REST API class.rest-api.php SELECT Statement sql injection


๐Ÿ“ˆ 14.51 Punkte

๐Ÿ“Œ Deps.dev API: Google-API hilft Software-Lieferketten abzusichern


๐Ÿ“ˆ 14.51 Punkte

๐Ÿ“Œ Deps.dev API: Google-API hilft Software-Lieferketten abzusichern


๐Ÿ“ˆ 14.51 Punkte

๐Ÿ“Œ Google: Malware abusing API is standard token theft, not an API issue


๐Ÿ“ˆ 14.51 Punkte

๐Ÿ“Œ Leverage Google Identity to reduce sign in friction and abuse (Google I/O '18)


๐Ÿ“ˆ 14.35 Punkte

๐Ÿ“Œ [webkit-dev] Starting January 4, 2021, Google will block all sign-ins to Google accounts from embedded browser frameworks


๐Ÿ“ˆ 14.35 Punkte

๐Ÿ“Œ Corona-App: Updates fรผr Tracing-API von Google und Apple


๐Ÿ“ˆ 13.23 Punkte

๐Ÿ“Œ Google Play services discontinuing updates for API levels 14 and 15


๐Ÿ“ˆ 13.23 Punkte

matomo