search

Mehdisouid / google-api-java-client

Automatically exported from code.google.com/p/google-api-java-client
0 stars 0 forks source link

add GoogleIdTokenVerifier.verify that takes issuers & audiences parameters #704

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
External references, such as a standards document, or specification?

http://javadoc.google-api-java-client.googlecode.com/hg/1.13.2-beta/com/google/a
pi/client/googleapis/auth/oauth2/GoogleIdTokenVerifier.html#verify(java.util.Set
, com.google.api.client.googleapis.auth.oauth2.GoogleIdToken)

http://android-developers.blogspot.ca/2013/01/verifying-back-end-calls-from-andr
oid.html

Java environments (e.g. Java 6, Android 2.3, App Engine, or All)?

All, but particularly useful on Android

Please describe the feature requested.

Currently we assume that the audience and issuee are both just the same client 
ID.  In the auth flow indicated by the article above we have a use case for 
audience and issuee not being the same.  We should support that by providing a 
method that takes parameters Collection<String> issuers and Collection<String> 
audiences, instead of Set<Sting> clientIds.  Note that Collection is a more 
general choice than Set.

Original issue reported on code.google.com by yan...@google.com on 11 Jan 2013 at 9:48

GoogleCodeExporter commented 9 years ago 
https://codereview.appspot.com/7086048/

Original comment by yan...@google.com on 12 Jan 2013 at 1:38

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 12 Jan 2013 at 2:09

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 18 Jan 2013 at 3:14

GoogleCodeExporter commented 9 years ago

Original comment by yan...@google.com on 13 Mar 2013 at 10:00