5 messages in com.googlegroups.google-gadgets-api[Google-Gadgets-API] Re: iGoogle Gadg...
FromSent OnAttachments
Ivan Stegic29 May 2008 12:06 
Dan (Google Employee)30 May 2008 11:31 
Ivan Stegic04 Jun 2008 22:46 
Dan (Google Employee)05 Jun 2008 10:01 
Ivan Stegic05 Jun 2008 10:07 
Subject:[Google-Gadgets-API] Re: iGoogle Gadget wants to use Google Accounts API Seemlessly
From:Dan (Google Employee) (api.@google.com)
Date:05/30/2008 11:31:04 AM
List:com.googlegroups.google-gadgets-api

Hi Ivan,

Because the gadget is rendered within an iframe, it will not directly have access to authentication credentials on the page. Your best bet is to create a type="url" gadget just like the Docs gadget you reference, that points to a page on your own servers. Use AuthSub on this page (which should recognize that the user is already logged into their user account) and you should then be granted an auth token to use whatever service you require.

Best, Dan

On May 29, 12:06 pm, Ivan Stegic <ivan@gmail.com> wrote:

I have a very simple question: what is the best way to implement use of the Google Accounts API within an iGoogle gadget so that the user *is* NOT required to login again, i.e. the gadget should use the fact that the user is already authenticated on the iGoogle homepage? My guess is that AuthSub will be used, but is there anything else I should know about? Any tips?

The prime example of this is the Google Docs gadget that seemlessly does exactly what I would like my own gadget to
do:http://www.google.com/ig/directory?url=docs.xml

The ultimate goal is to have an iGoogle Gadget that requires authentication so that preferences, account information, and other information can be tracked on the gadget's server.