Google OAuth-2 how to ask user for a password on each login? -


i need ask user password each time using google oauth. there option have used "max_auth_age", stops working. there replacement option. if not - please suggest can submit "feature request" google restore feature. thanks.

upd have read possible duplicate topic , tried use max_age instead max_auth_age. did not help.

p.s know main idea of oauth2 not use passwords prompts, customer requirement. afraid person, not allowed use system can have access on shared computer if forgot logout gmail.

from view of point of security, that's problem not ask password when user try login again...try imagine doing logout web app , leave pc/laptop/tablet/smartphone alone...and keep on imagining has sensible information app, such personal data, or control iot inside home! else can enter account inside web app doing 1 or 2 clicks. that's real security problem!

facebook oauth2 signing allows developers select "reauthentication" option apps, when user selects login again, asked password again. that's natural , correct matter point of view of security.

from point view of users , security, should enough logout. you, developer, should provide secure logout users. problem that, @ present day, can't provide secure logout users using oauth through sites google or twitter, example... :-(

best regards! bcm


Comments

Popular posts from this blog

searchKeyword not working in AngularJS filter -

sequelize.js - Sequelize: sort by enum cases -

user interface - how to replace an ongoing process of image capture from another process call over the same ImageLabel in python's GUI TKinter -