XF2 - [TylerAustin] Google One Tap Sign-In - XF2

Compatible XF 2.x version(s)

Additional requirement(s): PHP 8.3.0+ (8.4+ recommended)
Google Client ID (Required)
Google Client Secret (Required)

License(s): You may not redistribute the files in whole or in part. You may not rent, lease, loan, custom changes and/or development that’s including private development, sub-license, sell, assign, pledge, transfer or otherwise dispose of the files in any form without prior consent.

This XenForo 2.3+ add-on integrates with Google One Tap for simplified login and registration.

Key Features:

Instant login with Google account using Google One Tap.
New user registration via Google login.
Automatic linking of Google accounts to existing XenForo accounts if emails match.
AdminCP options to enable/disable Google One Tap and set Google OAuth Client ID.
Ability to restrict Google One Tap to specific pages (e.g., /login, /register).
“Test Mode” to allow only selected users to see Google One Tap.
Define test users by entering their user IDs in AdminCP.
Legacy redirect option (new!) to use /connected_account.php.
User-group permission to control access to Google One Tap Login, disable Google One Tap popup, and view Google One Tap logs.
Logs failed login attempts to the AdminCP Server Error Log.
Displays avatar + name + email above the disassociate controls.
Require CAPTCHA on registration completion option
Auto‑login newly registered accounts option
“Clear Logs” button inside the log viewer in adminCP to manually remove old logs
Admin widget to display the last 5 login failures on the AdminCP dashboard (Coming Soon)
Google One Tap appears in a floating box instead of requiring button clicks.
Test Google One Tap Callback and Test Google One Tap Connectivity
Fully responsive design for mobile and desktop.
Reset Google One Tap Permissions
Auto-delete old logs with a default of 30 days.
Scheduled cron to clean up logs.

Disclosure:

External services: This add‑on uses Google Identity Services to render the One Tap prompt and validate Google ID tokens.
Data sent externally: When One Tap is used, the browser loads Google’s identity script and the server may request Google’s public keys for ID‑token verification; a fallback token‑validation call may send the ID token to Google if local JWT validation is unavailable.
Timing: Only during One Tap usage (login/link/registration). No external calls occur during install or uninstall.

Reactions: salafilab

XF2 [TylerAustin] Google One Tap Sign-In - XF2 1.0.9