search

waleedAhmad1 / google-glass-api

Automatically exported from code.google.com/p/google-glass-api
0 stars 0 forks source link

Third party authentication scope causes an error (on Google's end) when trying to authenticate #561

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. Go to https://developers.google.com/apis-explorer/#p/mirror/v1/
2. Turn the switch for OAuth to "On"
3. Enter https://www.googleapis.com/auth/glass.thirdpartyauth as an additional 
scope.
4. Click Authorize

What is the expected output? What do you see instead?
I expect to see a page with "Accept" and "Cancel" buttons with descriptions of 
the requested auth scopes. Instead, I get an an error saying, "Some requested 
scopes cannot be shown: [https://www.googleapis.com/auth/glass.timeline, 
https://www.googleapis.com/auth/glass.location, 
https://www.googleapis.com/auth/glass.thirdpartyauth]"

When the thirdpartyauth scope is not included, everything works as expected.

Error attached.

Original issue reported on code.google.com by jessie.m...@finicity.com on 3 Jul 2014 at 9:02

Attachments:

GoogleCodeExporter commented 9 years ago 
Hello,

This is indeed working as intended: the thirdpatyauth scope should only be used 
with a Service Account, not through a user grant.

For more information, please refer to:
  https://developers.google.com/glass/develop/gdk/authentication

Best,
Alain

Original comment by ala...@google.com on 7 Jul 2014 at 4:41

GoogleCodeExporter commented 9 years ago 
So is there no way to have both a Mirror API and a GDK Application? Most of my 
interactions don't require a GDK application, but for convenience and speed on 
some of the interactions I want to add GDK parts. Right now I'd have to have 
these as two separate applications (or, at the very least, have the 
authentication occur twice)?

Is there any way to have my Glassware do both without causing undue burden on 
the user?

Original comment by jes...@jessieamorris.com on 7 Jul 2014 at 4:47

GoogleCodeExporter commented 9 years ago 
You can have both a Mirror and GDK Glassware listed as one single entry in 
MyGlass: the user visible part would only be the grant screen for the 
glass.timeline (and other scopes your Glassware needs). The GDK auth part, 
which is using a Service Accounts as authentication, is invisible to the user 
and is done on your server.

Original comment by ala...@google.com on 7 Jul 2014 at 4:53

GoogleCodeExporter commented 9 years ago 
Ah, I understand now. The examples on the service accounts are a little bit 
lacking for Python. I've gotten past that issue and am authenticated correctly 
now. Thank you very much!

Original comment by jes...@jessieamorris.com on 7 Jul 2014 at 7:40