Is it possible for an Android application to use the Open-ID service?

Question

I have a C / S solution that makes Android its client and PHP as its server.

I have my own account system.

I am wondering if I can provide my user to login with a Google account?

I saw that there is a web solution for this, for example this stackoverflow.com can use a Google account to log in directly.

Is there a solution for the C / S system?

Answer 1

Do not do without a web browser.

If the user is not logged in for google (or any other provider), he must first authorize with the provider. This is done through a web browser, and you should not even try to do it in any other way (for security reasons, the user must be sure that he is connected to the provider, for example, by seeing the URL in his browser).

However, even if the user is logged in, the provider should know this - usually with a cookie. Cookies are stored in a web browser. Therefore, theoretically, you can analyze the browser cookie and then try immediate authentication, but this will not work until you log in and authorize the relying party first through a web browser.