Extension talk:GoogleLogin/PostAuthManager

Mediawiki version 1.29.1 and current GoogleLogin extension.

require_once "$IP/extensions/GoogleLogin/GoogleLogin.php";

$wgGLSecret = 'Removed for post';

$wgGLAppId = 'Removed for post';

$wgGLAllowedDomains = array('xxxxxxxxxxxxxxxxxx');

$wgGLAllowedDomainsDB = true;

$wgWhitelistRead = array( 'Special:GoogleLoginReturn' );

$wgGroupPermissions['sysop']['managegooglelogindomains'] = true;

$wgShowExceptionDetails = true;

When I attempt to link my wiki account with my google account I get "xxxxxx/index.php/Special:LinkAccounts#" page blank with a 500 error not sure why. Just added to the wiki followed the current instructions run the script the composer update and that it exist on the pages but they all fail in the same way.

Instaled latest versions

Mediawiki : 1.27.1

GoogleLogin : REL1_27

Updated LocalSettings.php with following

require_once "$IP/extensions/GoogleLogin/GoogleLogin.php";

$wgGLSecret = 'xxxxxxxxxxxx';

$wgGLAppId = 'xxxxxxxxxxxx';

But when i try to login with google its showing

Link status - not linked

Screenshot http://i.imgur.com/zJImoQ3.jpg

How to fix this?

You need to link the Google account with your wiki account by using Special:LinkAccounts :)

I'm seeing a similar issue, but Special:LinkAccounts just redirects to Special:UserLogin which gets the same "the supplied credentials are not associated with any user on this wiki".

If you open Special:LinkAccounts and you get redirected to Special:UserLogin, you should see a message which says, that you need to login again to protect your data (as Special:LinkAccounts requires a re-authentication for security reasons after some time). Obviously, you need to choose an authentication method, which is already available to your user account. As you still haven't linked your Google account with your wiki account, you first need to to login with your username and password again (or any other available authentication module). After you've logged in you see Special:LinkAccounts, where you can choose "Link with Google" or something. If you click this button your wiki account gets linked with your Google account. After it you can logout and login with your Google account again.

The previous authentication plugin that was used is no longer available. I even attempted to manually switch the user_google_user entry for my new user to my old user's id, and it silently failed when trying to log in.

So is this plugin not a standalone authentication option? Am I correct that a user must already have an account, and they're just adding Google as another form of authentication? I'm really looking for a plugin that is standalone -- users do not need to already have an account on the wiki.

I'm coming from the LdapAuthentication plugin, which I may have to abandon because it seems incompatible with the Translate suite of extensions. I've set everything up according to instructions (aside from the fact that the two pages do not agree as to what URL to put for the Authorized Redirect URI -- is it GoogleLogin or GoogleLoginReturn?).

When I successfully auth to Google, I'm left with the same "Link status - not linked" as the original poster. If I go to Special:LinkAccounts, it tells me "There are no linkable accounts." Perhaps this is because I'm auth'd using Ldap?

Currently, GoogleLogin is not able to create accounts automatically, so yes, the user needs to create an account manually (or click "Create with Google" on the account creation page). It would be possible, that, if GoogleLogin is the only authentication provider, the user is automatically created based on the e-mail-address (something unique) retrieved from Google. However, this needs to be implemented first.

Btw.: That is not a problem from GoogleLogin only. If another authentication provider is only a link-provider, it can not be easily tweaked to create accounts automatically.

Using older version of GoolgeLogin.

I've just installed 0.40 in a MediaWiki 1.27.1. I login with my email address and password, and get "The supplied credentials are not associated with any user on this wiki."

I understand AuthManager is supposed to create accounts ...

Our Google accounts are all two-factor. How well does the extension work with those? Is there anything special we need to do for two-factor?

Ok, it seems there is a misunderstanding somewhere :P What exactly do you do on your wiki to login? You simply need to click the "Login with Google" button, no need to enter the e-mail address or even the password of your Google account in the login form.

About the two-factor-part: You do not need to do anything to support this. The extension does not need to support or even do anything special for anything login-related stuff on Google's side. If you click the Login with Google Button, GoogleLogin simply delegates the login process to Google (where you have to do anything you need to authenticate). After your login was successful (no matter how many steps and things you needed to do), Google will return the required data back to GoogleLogin. This is the only thing, GoogleLogin needs to know about, anything else is a black box from point of view of GoogleLogin.

Long written things short: Two-Factory auth _on Googles side_ is perfectly well supported by GoogleLogin.

Yes, it's all working now :-) I'm using 0.3 with great success.