Google Provider OAuth settings for development

[SidharthBansal]

We have completed Google OAuth provider settings on

• unstable.publiclab.org
• stable.publiclab.org
• publiclab.org
  The following are left so that the developers can use it in development
• localhost:3000(http connection)
• localhost:3001(https connection)
  We are moving from the conversation of Google Authentication  #2771 to here.
  @jywarren Can you please make the changes to the Google developers app as you indicated in Documentation added for OAuth #2855 (comment)?

[jywarren]

Just did it, i believe!

[jywarren]

Can u check and close this if it works? Thanks @SidharthBansal !!!

[SidharthBansal]

Sorry, it is not working
Missing Required Parameter: client_id

[SidharthBansal]

Is it working in your browser @jywarren for both ports 3000 and 3001

[jywarren]

I think it's the domain verification -- but we can't verify localhost... maybe look around for how this ought to work? Were you able to add these for your own API account?

…

On Thu, Jun 21, 2018 at 6:59 PM Sidharth Bansal ***@***.***> wrote: Is it working in your browser @jywarren <https://github.com/jywarren> for both ports 3000 and 3001 — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2892 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ-yHsCehzvY-MF5_cL7s0zzaNxg-ks5t_CUegaJpZM4Uy3NP> .

[SidharthBansal]

I don't require any privacy policy nor domain verification for the 3000 and 3001 port.
I just need the People connect api which is for sure enabled in the app created by you.

[SidharthBansal]

Can you please verify them

[jywarren]

[SidharthBansal]

Is it working on your localhost?
Can we change this app_id and app_secret to my app_id and app_secret to check it in development first?

[jywarren]

wait, change it where? are there "trial" ids available for working in development? Like how there's a "testing" key for ReCaptcha for working with localhost?

…

On Thu, Jun 21, 2018 at 7:23 PM Sidharth Bansal ***@***.***> wrote: Is it working on your localhost? Can we change this app_id and app_secret to my app_id and app_secret to check it in development first? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2892 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJz-ZMjJTReOGK3kcro8hozh8QdH0ks5t_CrLgaJpZM4Uy3NP> .

[SidharthBansal]

Yeah I saw that there is testing key for ReCaptcha working with localhost

[SidharthBansal]

are there "trial" ids available for working in development?

No there are not.
I was thinking that first we can change the app_id and app_secret in the jenkins to my app_id and app_secret and see whether we are able to configure google login on localhost or not on both my laptop and yours.

If we will not be able to configure it ,that will mean that we can't have same id for all developers

if we both will be able to log in via google provider that means, we need to change the app_id and app_secret in the jenkins back to the app_id and app_secret which you have created for production and need to modify the app settings OR may be we need to create one more app for developers access. Possible reason for this could be localhost is not having domain verification and we have done domain verifaction for that app. Make sense?

[SidharthBansal]

I have sent you app_id and app_Secret on jeff@publiclab.org.

[jywarren]

sorry it is late here (much later there! Be sure not to forget to sleep!) and i have to stop working... but can you explain tomorrow the reason Jenkins should be changed in relation to localhost? Isn't one up on unstable.publiclab.org (jenkins) and the other on your computer? Maybe my brain needs a break!

…

On Thu, Jun 21, 2018 at 7:37 PM Sidharth Bansal ***@***.***> wrote: I have sent you app_id and app_Secret on ***@***.*** — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2892 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ33NGdwsJxFxoR9K0dH06LBGcxi9ks5t_C4DgaJpZM4Uy3NP> .

[SidharthBansal]

Maybe my brain needs a break!

Ok. You take rest. We can continue it later.

Be sure not to forget to sleep!

Yeah sure. Thanks

[SidharthBansal]

A few things
in production we have ReCaptcha

But in the development, we don't have it

Also, see

plots2/config/initializers/recaptcha.rb

Line 2 in 608ee10

if Rails.env.production?

This line says if the environment is production which localhost:3000 is not. So this file doesn't have any role in development.

As you mentioned this in #2855 (comment). So, I inspected it by deleting the ENV[''...''].... line. Even then I could not see any change on localhost:3000/signup. This shows that ReCaptcha is not surely available in the development.

I don't think we have any other page using ReCaptcha.

[SidharthBansal]

@jywarren Also the form which is rendered inside the signup form says that ReCaptcha is not used in development

plots2/app/views/users/_form.html.erb

Lines 60 to 88 in 608ee10

	<% if Rails.env == "production" && !params[:spamaway] %>
	<%= recaptcha_tags %>
	<% else %>
	<%= fields_for @spamaway do |spam| %>
	<div class="form-group spamaway">
	<label for="spamaway_follow_instructions">
	<%= t('users._form.are_you_human') %>
	</label>
	<p>
	<%= t('users._form.spam_filtering') %>
	</p>
	<% vars = [:statement1, :statement2, :statement3, :statement4] %>
	<% turingtest = Spamaway.get_pairs vars.length %>
	<% turingtest.each_index do |i| %>
	<div class="btn-group btn-group-justified" role="group">
	<% [0,1].each_with_index do |s, j| %><% statement = turingtest[i][s] %>
	<div class="btn-group" role="group">
	<button type="button" class="col-xs-5 btn btn-default" style="text-align:left;<% if i.odd? %> background:#eef;<% end %>" id="spamaway-<%= i.to_s + j.to_s %>">
	<%= spam.radio_button vars[i], statement %> <%= statement %>
	</button>
	</div>
	<% end %>

[SidharthBansal]

@jywarren once we are done with this, you need to do settings for GitHub as a provider in #2856.
Github is working fine on my laptop on localhost.
The settings of Github are merged by you.

[jywarren]

Well, I guess I'm not sure what we can do here. The settings are created but localhost is not working - possibly due to domain verification which we cannot do for localhost. See the settings in this comment: #2892 (comment) -- what else is left that we could try?

As to the environment variables, you can insert them at run time locally by doing:

OAUTH_GOOGLE_APP_KEY=xxxxxxxx passenger start

Or, you can put it in a file like environment.sh which is like:

OAUTH_GOOGLE_APP_KEY=xxxxxxxx

and do:

source environment.sh && passenger start

[SidharthBansal]

The settings are created but localhost is not working - possibly due to domain verification which we cannot do for localhost

If not can you please check it with the app_id and app_secret which I have sent you on jeff@publiclab.org
My app_id and app_secret is working on localhost which I have sent you.

I think this can help to troubleshoot a little bit

[SidharthBansal]

The settings are created but localhost is not working - possibly due to domain verification which we cannot do for localhost

Localhost does not require any domain verification but the websites does. So, in the app_id and app_secret which I have sent you. I have not done any domain verification.

[jywarren]

It's a bit late here, but I will try tomorrow, thanks!

…

On Tue, Jun 26, 2018 at 7:09 PM Sidharth Bansal ***@***.***> wrote: The settings are created but localhost is not working - possibly due to domain verification which we cannot do for localhost Localhost does not require any domain verification but the websites does. So, in the app_id and app_secret which I have sent you. I have not done any domain verification. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#2892 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AABfJ0TL6eFp4aDd6FKaLLJkhkyoUtoRks5uAr8bgaJpZM4Uy3NP> .

[SidharthBansal]

As discussed in #2856, we will either create one developers app for github provider OR we will write documentation for developer to set up their app locally.

So, @jywarren we are completed with GOOGLE, so no need to try this.
Thanks @jywarren