1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
## Google
Google does not support dynamic client registration, but there is a preregistered public client so that account
configuration generation is as easy as with dynamic client registration.
### Quickstart
Example:
```
$ oidc-gen --pub --issuer https://accounts.google.com/ --flow=device <shortname>
The following scopes are supported: openid profile
Scopes or 'max' (space separated) [openid profile]:
[...]
Using a browser on any device, visit:
https://www.google.com/device
[...]
success
The generated account config was successfully added to oidc-agent. You don't have to run oidc-add.
Enter encryption password for account configuration '<shortname>':
Confirm encryption Password:
```
### Advanced options
#### Manual Client registration
A client can be registered manually at <https://console.developers.google.com/> There is documentation on how to do this
at
<https://developers.google.com/identity/protocols/OpenIDConnect> (just the first section "Setting up OAuth 2.0").
After the client registration you can download the client configuration as a json file. You can pass this file
to `oidc-gen` using the `-f` flag. If you don't do this you have to enter the configuration manually (you than have to
call `oidc-gen` with the `-m` flag).
|
