how to verify google openid response

Posted by Broom on Stack Overflow See other posts from Stack Overflow or by Broom
Published on 2010-06-02T11:49:48Z Indexed on 2010/06/02 11:54 UTC
Read the original article Hit count: 326

Filed under:

I'm trying to add authorization throw google openid to my users. I'm receiving id (https://www.google.com/accounts/o8/id?id=AIt...Ew-Bo) but how can i check that it's legit. I mean user can create malicious request with email of another user, how can i check that returning email and claimed id is legit?

© Stack Overflow or respective owner

Related posts about openid