Google does not support dynamic client registration, but there is a preregistered public client so that account configuration generation is as easy as with dynamic client registration.
Quickstart
Example:
$ oidc-gen --pub --issuer https://accounts.google.com/ --flow=device <shortname>
The following scopes are supported: openid profile
Scopes or 'max' (space separated) [openid profile]:
[...]
Using a browser on any device, visit:
https://www.google.com/device
[...]
success
The generated account config was successfully added to oidc-agent. You don't have to run oidc-add.
Enter encryption password for account configuration '<shortname>':
Confirm encryption Password:
Advanced options
Manual Client registration
A client can be registered manually at https://console.developers.google.com/ There is documentation on how to do this at https://developers.google.com/identity/protocols/OpenIDConnect (just the first section "Setting up OAuth 2.0").
After the client registration you can download the client configuration as a json file. You can pass this file to oidc-gen
using the -f
flag. If you don't do this you have to enter the configuration manually (you than have to call oidc-gen
with the -m
flag).
Last updated