Oauth2 authentication plugin for Moodle (for Moodle 3.2 and earlier)

Authentication ::: auth_googleoauth2

Maintained by

Sergio Rabellino

Part of set OAuth2.

Sign-in with an Oauth2 provider. The first time you sign-in, a new account is created.

Latest release: 5 years

716 sites

113 downloads

272 fans

Current versions available: 3

Download

Plugin end of life starting from Moodle 3.3

starting from Moodle 3.3, Oauth2 should be implemented in Moodle core. It will require you to upgrade to Moodle 3.3 and switch to the Oauth2 core authentication (and probably do some migration), but it is a great news as authentication is a really sensible matter and having Oauth2 plugins in core will guarantee their maintenance. So starting from Moodle 3.3 I highly recommend to use the new Oauth2 core plugins ((https://docs.moodle.org/dev/Better_Office_Integrations_3.3#Core_API_for_managing_Authorized_OAuth_Applications) ) . Missing core providers will likely be implemented by someone and published in the Moodle.org plugin repository. There will probably be a new Oauth2 category in the Moodle plugin repository. Wait and see...

I will try to mantain this plugin until Moodle 3.1 (LTS) runs out of security upport (13 May 2019).

Warning for Facebook users

The plugin stopped working the 27th March 2017 as Facebook closed the API 2.2. The last versions of this plugin have been updated to support Facebook 2.8 API. As usual carefully test before upgrading a third party plugin if your Moodle site is important to you (especially as it is an authentication plugin)

Installation

add the plugin into /auth/googleoauth2/
in the Moodle administration, enable the plugin (Admin block > Plugins > Authentication)
in the plugin admin page, follow the displayed instructions.

I also created a free mini-course on how to install a Moodle plugin using Oauth2 plugin as example.

Documentation and support

You can search in all existing issues on Github. Go to the issues page, next to the filter button there is a search field. Remove the default content, type your keywords and press enter.

There is a FAQ too.

Alternative plugins

There are many alternatives to this plugin, if you have any trouble with this plugin it may be a good idea to try them:

Moodle core Oauth2 plugins (Moodle 3.3 and later)
Elcentra
LenAuth
OpenID Connect
LinkedinAuth
check the auth plugin list

Useful links

Screenshots

Contributors

Sergio Rabellino (Lead maintainer)

View other contributions

Jérôme Mouneyrac: Original author and previous maintainer

View other contributions

Please login to view contributors details and/or to contact them

Awards

Early bird 3.0

Automated testing support

Early bird 3.2

Comments

Mark Roberts
Fri, 2 Oct 2015, 8:37 AM
Hi, I've successfully set up the plugin to work with Google, but it isn't working with Facebook. Unfortunately, the procedure seems to have changed a bit for setting up the app with Facebook (I noticed this issue on Github). Could you possible let me know in addition to the email address, what other settings need to be enabled / set for Facebook? Thanks!
Santiago Andrade
Thu, 8 Oct 2015, 6:01 AM
Hello, I have the following problem in my moodle 2.9.1 platform , my platform was functioning common and current , when I got the idea of installing this plug-in.

When I Installed the plug -in and it is finished, the website goes to: my_url/admin/index.php and can't get loaded !!!! Also whenever moodle income , there is routed automatically to my_url/admin/index.php and the page isn't loaded again !!! I Looked for another ways to remove the extension but not where it is ?? .... someone could help me please ??
Jérôme Mouneyrac
Thu, 8 Oct 2015, 2:56 PM
Hi Santiago,
sorry I am not sure to understand your problem. All Moodle plugins when they got installed trigger my_url/admin/index.php. Can you post a screencast video somewhere (youtube for example) to demo your issues. Cheers, Jerome
Jérôme Mouneyrac
Thu, 8 Oct 2015, 2:58 PM
Mark: I am planning to do a demo video for installing the plugin later (as you mentioned providers are super good to change their admin pages and terms every years). For the moment you will have to read facebook docs, google how to do it... etc. It is a very common process, demo video must already exists in plenty of place, just need to find them
Santiago Andrade
Thu, 8 Oct 2015, 8:56 PM
Hi Jerome,

I did the video:

https://www.youtube.com/watch?t=7&v=i5AgabY-Rjs

When I get log in, always moodle gets automatically to roated to /admin/index.php and the page doesn´t get loaded!!!

Please I need help to resolve this problem!

Santiago
Jérôme Mouneyrac
Thu, 8 Oct 2015, 9:43 PM
Santiago: enable debug like explained in https://docs.moodle.org/29/en/Debugging#In_config.php and tell us what is your error message.
Santiago Andrade
Fri, 9 Oct 2015, 3:20 AM
Hi Jerome, I just resolve the error!!! It was in php.ini, I changed the vuale: the max_execution_time = 360 , and now the page loads!!!!
Anyway thanks a lot for your help Jerome!!!
Jonatan martinez
Tue, 20 Oct 2015, 5:53 AM
Solución al problema de logout de google
Hola, nuevamente te escribo por el inconveniente que tenia al cerrar la sesión de moodle no cerraba sesión de cuentas google, pero hice que cuando el usuario salga de moodle redirija a la pagina de https://www.google.com/accounts/Logout?continue=https://appengine.google.com/_ah/logout?continue=http://mi.moodle.com

Espero puedas mejorar con esta información el plugin
y gracias nuevamente por tu aporte
Jérôme Mouneyrac
Thu, 29 Oct 2015, 11:44 PM
Thanks William for reporting this potential security issue. Can you email me the details? Just for the info, normally try to contact the plugin maintainer before announcing a potential security problem (https://docs.moodle.org/dev/Moodle_security_procedures). It avoids potential hackers to take advantage of it.
William Michael
Thu, 29 Oct 2015, 11:47 PM
FYI...no end user would know that the Moodle Security Procedures document exists.
Helen Foster
Fri, 30 Oct 2015, 12:36 AM
William, I have deleted your previous comment as requested by Jerome. The Moodle security procedures doc is linked to from https://moodle.org/security/ though we obviously need to make it easier to find. Thanks for pointing this out.
Marlon Orozco
Thu, 5 Nov 2015, 4:54 AM
Debug info:
Error code: couldnotgetgoogleaccesstoken
Stack trace:
• line 436 of /auth/googleoauth2/auth.php: moodle_exception thrown
• line 89 of /login/index.php: call to auth_plugin_googleoauth2->loginpage_hook()
Jérôme Mouneyrac
Fri, 6 Nov 2015, 1:19 PM
Marlon: usually it is because people enter the wrong key/secret.
Marlon Orozco
Sat, 7 Nov 2015, 12:08 AM
Jérôme Mouneyrac resolví el problema, es que en el servidor necesitaba instalar unos módulos de php pecl, oauth, y luego añadir la en /etc/php.ini extension=oauth.so
Pero ahora tengo otro problema, estoy probando aunteitcarme con facebook, y me da el problema siguiente

Tu dirección de correo electrónico no ha sido verificado por el método de autentificación que has seleccionado. Puede ser que te hayas olvidado de hacer click en el enlace "verificar dirección de correo" que Google o Facebook debía haberte mandado durante la subscripción a su servicio.
Debug info:
Error code: emailaddressmustbeverified

ahora si ya no se qu ehacer
NOTA: la auntenticacion con google funciona perfecto
Marlon Orozco
Sat, 7 Nov 2015, 12:10 AM
Hola nuevamente,tengo este error
Tu dirección de correo electrónico no ha sido verificado por el método de autentificación que has seleccionado. Puede ser que te hayas olvidado de hacer click en el enlace "verificar dirección de correo" que Google o Facebook debía haberte mandado durante la subscripción a su servicio.

Más información sobre este error, es cuando quiero auntenticarme con facebook, pero con google funciona perfect
Debug info:
Error code: emailaddressmustbeverified
Stack trace:

line 258 of /auth/googleoauth2/auth.php: moodle_exception thrown
line 89 of /login/index.php: call to auth_plugin_googleoauth2->loginpage_hook()