Google Social Login (googleLogin)

The configuration of the social login for Google.

NameTypeDefaultDescription

authFilterRef

A reference to top level authFilter element (string).

Specifies the authentication filter reference.

authorizationEndpoint

string

https://accounts.google.com/o/oauth2/v2/auth

Specifies an Authorization end point URL.

clientId

string

The application or client ID.

clientSecret

Reversably encoded password (string)

The secret of the application or client.

clockSkew

int

300000

The maximum time difference in milliseconds between when a key is issued and when it can be used.

displayName

string

Google

The name of the social login configuration for display.

groupNameAttribute

string

The value of the claim is used as the user group membership.

isClientSideRedirectSupported

boolean

true

Specifies whether client side redirection is supported. Examples of a client include a browser or a standalone JavaScript application. If set to true, the client must support JavaScript.

issuer

string

https://accounts.google.com

The url of the issuer.

jwksUri

string

https://www.googleapis.com/oauth2/v3/certs

Specifies a JSON Web Key service URL.

mapToUserRegistry

boolean

false

Specifies whether to map userIdentifier to registry user.

realmNameAttribute

string

iss

The value of the claim is used as the subject realm.

redirectToRPHostAndPort

string

Specifies a callback host and port number.

responseType

  • code

  • id_token token

code

Specifies the OAuth response type.
code
Authorization code
id_token token
ID token and access token

scope

string

openid profile email

Specifies required scope.

signatureAlgorithm

string

RS256

The algorithm that is used to sign a token or key.

sslRef

A reference to top level ssl element (string).

Specifies an ID of the SSL configuration that is used to connect to the social media.

tokenEndpoint

string

https://www.googleapis.com/oauth2/v4/token

Specifies a token end point URL.

tokenEndpointAuthMethod

  • client_secret_basic

  • client_secret_post

client_secret_post

Specifies required authentication method.

useSystemPropertiesForHttpClientConnections

boolean

false

Specifies whether to use Java system properties when the OpenID Connect or OAuth client creates HTTP client connections. Set this property to true if you want the connections to use the http* or javax* system properties.

userNameAttribute

string

email

The value of the claim is authenticated user principal.

userUniqueIdAttribute

string

The value of the claim is used as the subject uniqueId.

website

tokenType

https://accounts.google.com

The website address.

authFilter

Specifies the authentication filter reference.

authFilter > cookie

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

name

string

Specifies the name.

authFilter > host

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

name

string

Specifies the name.

authFilter > remoteAddress

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

ip

string

Specifies the IP address.

matchType

  • contains

  • equals

  • greaterThan

  • lessThan

  • notContain

contains

Specifies the match type.

authFilter > requestHeader

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

name

string

Specifies the name.

value

string

The value attribute specifies the HTTP request header value. If the value is not specified, then matching is done with the name attribute, not the value attribute.

authFilter > requestUrl

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

urlPattern

string

Specifies the URL pattern.

authFilter > userAgent

A unique configuration ID.

NameTypeDefaultDescription

agent

string

Specifies the user agent

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

authFilter > webApp

A unique configuration ID.

NameTypeDefaultDescription

id

string

A unique configuration ID.

matchType

  • contains

  • equals

  • notContain

contains

Specifies the match type.

name

string

Specifies the name.

jwt

Specifies the information that is used to build the JWT tokens. This information includes the JWT builder reference and the claims from the id token.

NameTypeDefaultDescription

builder

tokenType

The referenced JWT builder creates a JWT token, and the token is added to the authenticated subject.

jwt > claims

Specifies a comma-separated list of claims to copy from the user information or the id token.