Improve Google Login with Multiple Accounts

[LeoMcA (Leo McArdle)]

@Geoffrey_Challen

Anyway, it seems like there are a few options here, in order from best to worst:

Another solution would be to always prompt a user to select a Google account, even if they’re only logged into one.

Both that, or:

@Geoffrey_Challen

Implement Google’s domain restriction so that I have to log in using my domain-specific provider

are possible with a handful of lines of code.

Discourse uses the omniauth-google-oauth2 gem for authentication, and as per its documentation:

• the first can be done by setting the prompt setting to select_account
• the second can be done by setting the hd setting to the G Suite domain

You pass in these options here, like the skip_jwt parameter:

lib/auth/google_oauth2_authenticator.rb

I imagine the core team will graciously accept a PR doing one or the other if you put them behind a site setting. If you want this right now, or are not tracking tests-passed with your instance, then you could implement this in an plugin which registers an auth provider which inherits Auth::GoogleOAuth2Authenticator and redefines the register_middleware method (or I guess you could even monkey patch that method in your plugin before it’s called instead).

Hope this helps