Appengine Cloud Endpoints with New Google+ Signature

Question

How the new apost google + fits into the end of authenticated calls to Cloud Endpoints. To use OAuth with endpoints, the application must request permission for the https://www.googleapis.com/auth/userinfo.email scope. Will I use this button to sign in to Google+? Or will I have to ask my users for another permission?

Answer 1

The Google+ sign-in button has the “Areas” attribute, where you can specify additional areas that you want to request. You can specify the scope of userinfo.email, as well as any cloud specific.

If you need to get the user's email address , you can add the userinfo.email scope to this attribute, and then use the appropriate end of the REST specify to get the address.

Also, to get email addresses in mobile apps, see

• Android
• iOS

Answer 2

The userinfo.email scope extends the plus.login scope. In fact, plus.login does not explicitly provide access to the user's email address.

Although you will request a “different permission”, all this is done simultaneously on the same OAuth screen, so all permissions will be listed immediately. The user will not display the screen after the permissions screen, a request for their email will be indicated along with requests for information about the plus.login feature.