For OpenID, when authenticated against Google, the authenticated URL that is returned is different across different browsers, IP addys, &c.
How does one obtain a unique user identifier from Google's OpenID implementation?
Login on one computer and I can get the following: https://www.google.com/accounts/o8/id?id=AItOawk......_OESXik
Login on my BlackBerry with same user account I get a different URL: https://www.google.com/accounts/o8/id?id=AItOawk......_ABIRop
Shall I assume yet a tertiary HTTP call must be made somewhere to uniquely identify the login?
Google issues per-realm identifiers, so as long as you login to the same website, you should get the same identifier for the same user.
Unless, of course, the site's openid implementation is broken and sends different realms based on different ip-s, or even on current session id (which could easily happen if it's in the url).
Try logging in on another website, such as stackoverflow, and check if it still returns different identifiers.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With