I have tried following the Google+ OAuth 2.0 Login document (Gluu v3.1.2) instead and am now requesting help about that :)
I've setup the Gluu and Google ends and tried testing.
One comment about the documentation here. Normally, it's pretty good at telling you to navigate > here > then there. For this bit, I was able to see the screenshot as a way to navigate. However, my installation has 2 settings:
Does "Default" essentially mean any authentication other than oxTrust, and oxTrust is the Gluu GUI?
Also, what is "acr"?
At any rate, I configured oxTrust acr for my new method (google_oauth) and opened a new private browser window and went to my Gluu server home page. I ended up at:
2018-02-13 19:57:28,364 ERROR [qtp212628335-11] [xdi.oxauth.authorize.ws.rs.AuthorizeAction] (AuthorizeAction.java:230) - Failed to get CustomScriptConfiguration. auth_step: 1, acr_values: google_oauth
The same kind of thing happens if I configure the Default acr to use google_oauth.
Thanks for any help on this.
Now that I have found:
/opt/gluu/jetty/oxauth/logs/oxauth_script.log I have more to add:
2018-02-13 19:21:15,899 INFO [oxAuthScheduler_Worker-4] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:209) - Google+ PrepareAttributesMapping. The number of attributes in remoteAttributesList and localAttributesList isn't equal
2018-02-13 19:21:15,899 INFO [oxAuthScheduler_Worker-4] [org.xdi.service.PythonService$PythonLoggerOutputStream] (PythonService.java:209) - Google+ Initialization. The attributes mapping isn't valid
Note, the documentation for the custom attributes included this:
gplus_remote_attributes_list: email, given_name, family_name, and locale
gplus_local_attributes_list: uid, mail, givenName, sn, cn, preferredLanguage
I did drop the "and" word from the remote_attributes_list, but did wonder if they needed to match up somehow.
Is this where we need to focus?
I changed the script attributes to the (probably not ideal) following in order to test further:
gplus_local_attributes_list: mail, givenName, sn, preferredLanguage
gplus_remote_attributes_list: email, given_name, family_name, locale
That wasn't right :)
PrepareAttributesMapping. There is no mapping to mandatory 'uid' attribute
Ok, so we need 'uid' on local. I read case #4162.
@Zamil - can you list a recommended mapping?
The image link showed (local) uid <-> (remote) given_name
and later has (local) givenName.