Reputation: 15042
Does Google plan to support the Form Post response mode in its OpenID Connect/OAuth 2.0 implementation?
http://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html
Other identity providers such as Azure Active Directory and IdentityServer support this, but it seems Google doesn't (based on reading the docs and some manual testing). For context, I'm building an OpenID Connect library and was hoping to leverage this capability (and prefer not to rely on acquiring tokens via HTTP GET and URL fragments).
Upvotes: 7
Views: 1509
Reputation: 3152
This does appear to work when you pass ?response_mode=form_post
to google... but I can't find it anywhere in their documentation. :shrug:
Upvotes: 2