Per this question I am using CodeIgniter and OAuth 2 in an attempt to provide SSO for internal users of my webapp, ideally verifying them against their
Google Apps account. No registrations or anything, just existing users.
Using the CI oauth2 spark I'm getting back from
Google an OAuth token similar to below:
OAuth2_Token_Access Object
(
[access_token:protected] => dp83.AHSDj899sDHHD908DHFBDjidkd8989dDHhjjd
[expires:protected] => 1349816820
[refresh_token:protected] =>
[uid:protected] =>
)
And using that token I can retrieve some user info from Google:
[uid] => 3849450385394595
[nickname] => this_guy
[name] => This Guy
[first_name] => This
[last_name] => Guy
[email] =>
[email protected]
[location] =>
[image] =>
[description] =>
[urls] => Array
(
)
Now to allow the 15 people or so who will be using the webapp currently to log in, do I need to create a users table in the mysql database with their email address as a key? Then compare the email which just came back from the
Google OAuth request and see if it exists in my users table?
What about the
Google access_token, do I store that now along with the email which already existed in the users table?
Related: How would I go about verifying the user automatically in the future against that access_token so they don't have to go through the whole OAuth approval process with
Google again?