Google登录API:强制输入密码? [英] Google login API: force to type password?

问题描述

我在我的网站上使用了一些社交服务提供商，包括Google.每当用户请求我的一项操作时，我都想向Google帐户输入密码.这是出于安全原因.

I'm using several social providers on my site, including Google. I would like to ask for password to Google account each time user requests one of my actions. This is for security reasons.

使用Facebook，我们可以发送auth_type=reauthenticate参数. Google API中有类似的东西吗?

With Facebook, we can send auth_type=reauthenticate parameter. Is there something like this in Google API?

我不是在寻找刷新令牌，我需要确保用户在任何状态下键入他的密码:是否已通过身份验证.

I'm not looking for refreshing tokens, I need to make sure user types his password at any state: whether already authenticated or not.

推荐答案

我阅读了您的帖子，并可以与您对此事感到沮丧有关(包括上面一些内联的不良回答).

I read your posts and I can relate to your frustration on this matter (including some of poor responses inline above).

您希望能够提示用户重新向Google进行身份验证，以证明计算机背后的用户确实是帐户持有人.我本人也需要类似的功能，所以我得出结论，他们没有实现它.这给依赖于Google登录名进行访问的应用程序带来了信任问题，但同时也提供了一些破坏性的功能，这些功能都需要重新确认用户的身份.希望我有更好的消息给你.

You want to be able to prompt users to reauthenticate with Google in order to prove that the user behind the computer is indeed the account holder. Having required similar functionality myself, I've concluded that they do not implement it. This creates a problem of trust for an application that relies on a Google login for access, but also provides some destructive functionality which should require a reaffirmation of the identity of the user. Wish I had better news for you.

已经使用Facebook的API实现了此功能，我确定Google会提供类似的功能，因为它对安全性至关重要，但实际上并非如此.

Having implemented this feature with Facebook's API, I was certain Google would provide similar since it's so essential to security, however they don't.

这篇关于Google登录API:强制输入密码?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！