Home/ Questions/Q 493555
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-13T05:25:01+00:00

I’m using the django_openid_auth module and have it configured to automatically create new user

  • 0

I’m using the django_openid_auth module and have it configured to automatically create new user accounts for new OpenIDs. This makes the “sign up” process really trivial, but I’m a bit worried that because of the way that Google generates it’s OpenID tokens it might accidentally create a new account for an existing user, giving them the impression the data in their original account has been lost.

As far as I can tell, Google will generate different claimed ID tokens for different domain names. That is http://www.site.com and site.com would create two distinct tokens and therefore two accounts in my system. I’ve fixed that by redirecting http://www.site.com to site.com.

Are there any other gotchas I need to be aware of? And can anyone point me in the direction of some details on what Google use to generate the ID?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    From the docs:

    openid.realm

    Authenticated realm. Identifies the domain that the end user is being asked to trust. (Example: “http://*.myexamplesite.com”) This value must be consistent with the domain defined in openid.return_to. If this parameter is not defined, Google will use the URL referenced in openid.return_to.

    The value of realm is used on the Google Federated Login page to identify the requesting site to the user. It is also used to determine the value of the persistent user ID returned by Google.

    • 0