FAQ

Q. What is the difference between authentication type OAUTH and OpenID?

A. When you start from scratch then you probably want OAUTH. When you've used non-SSO OpenID and need Google OAuth provider support after OpenID service shutdown, then you need Hybrid OpenID+OAuth authentication method. This is supported with auth.type = 'OpenID'.

Q. Why linking of user identity from old Google's OpenID account to new OAuth account doesn't work for my site?

A. It works. Verify that you have configured the plugin correctly:

  [plugin "gerrit-oauth-provider-google-oauth"]
  [...]
    link-to-existing-openid-accounts = true

and that your domain remained the same as it was with OpenID. Check the discussion in this issue: Issue #2.

Q. Why linking of user identities doesn't work from the UI?

A. This late feature wasn't merged yet:

• https://gerrit-review.googlesource.com/67280
• https://gerrit-review.googlesource.com/67281

Q. Why switching of user accounts doesn't work from the UI?

A. This late feature wasn't merged yet:

• https://gerrit-review.googlesource.com/67282

Q. Why I am getting identity is untrusted error with Hybrid OpenID+OAuth method?

A. You need to set trustedOpenID:

  [auth]
    type = OPENID
    trustedOpenID=^.*$

Q. How to configure the proxy with this plugin?

A. Check this Proxy support request.

Q. I would like to compile the plugin, but am failing to install/run buck.

A. Then stop here and don't compile it yourself. I have uploaded plugin binaries for both 2.10 and 2.11 releases:

• 2.10 https://github.com/davido/gerrit-oauth-provider/releases/tag/v0.3
• 2.11 https://github.com/davido/gerrit-oauth-provider/releases/tag/v2.11

Q. Why the compilation of the plugin is broken?

A. It isn't broken. It works. Check that you are using the correct branch stable-2.10 for Gerrit API 2.10.3.1 and master for Gerrit API 2.11.

Q. Why Gerrit doesn't start after setting the auth.type = OAUTH?

A. You havn't installed the plugin or havn't configured any of the providers. Also verify that you have replaced the plugin name in the documentation:

[plugin "@PLUGIN@-google-oauth"]
    client-id = "<client-id>"
    client-secret = "<client-secret>"
    link-to-existing-openid-accounts = true

The correct plugin name + suffix is:

  [plugin "gerrit-oauth-provider-google-oauth"]
  [...]