Per this question I am using CodeIgniter and OAuth 2 in an attempt to provide SSO for internal users of my webapp, ideally verifying them against their Google Apps account. No registrations or anything, just existing users.
Using the CI oauth2 spark I'm getting back from Google an OAuth token similar to below:
OAuth2_Token_Access Object
(
[access_token:protected] => dp83.AHSDj899sDHHD908DHFBDjidkd8989dDHhjjd
[expires:protected] => 1349816820
[refresh_token:protected] =>
[uid:protected] =>
)
And using that token I can retrieve some user info from Google:
[uid] => 3849450385394595
[nickname] => this_guy
[name] => This
Guy
[first_name] => This
[last_name] =>
Guy
[email] =>
[email protected]
[location] =>
[image] =>
[description] =>
[urls] => Array
(
)
Now to allow the 15 people or so who will be using the webapp currently to log in, do I need to create a users table in the mysql database with their email address as a key? Then compare the email which just came back from the Google OAuth request and see if it exists in my users table?
What about the Google access_token, do I store that now along with the email which already existed in the users table?
Related: How would I go about verifying the user automatically in the future against that access_token so they don't have to go through the whole OAuth approval process with Google again?
