title: Google hybrid OpenID+OAuth login not prompting for OAuth access
body: <p>I'm trying to implement Google's hybrid OpenID+OAuth login on a Google AppEngine site. For some reason, my login link only prompts the user to give login access via their Google account (OpenID). It does not ask for access to Contacts/Docs/etc (OAuth).</p>
  
  <p>The example on Google's site uses this URL for login:</p>
  
  <pre><code>https://accounts.google.com/o/openid2/auth?
  openid.ns=http://specs.openid.net/auth/2.0&amp;
  openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&amp;
  openid.identity=http://specs.openid.net/auth/2.0/identifier_select&amp;
  openid.return_to=http://googlecodesamples.com/hybrid/index.php&amp;
  openid.realm=http://googlecodesamples.com&amp;
  openid.mode=checkid_setup&amp;
  openid.ns.ui=http://specs.openid.net/extensions/ui/1.0&amp;
  openid.ns.ext1=http://openid.net/srv/ax/1.0&amp;
  openid.ext1.mode=fetch_request&amp;
  openid.ext1.type.email=http://axschema.org/contact/email&amp;
  openid.ext1.type.first=http://axschema.org/namePerson/first&amp;
  openid.ext1.type.last=http://axschema.org/namePerson/last&amp;
  openid.ext1.type.country=http://axschema.org/contact/country/home&amp;
  openid.ext1.type.lang=http://axschema.org/pref/language&amp;
  openid.ext1.required=email,first,last,country,lang&amp;
  openid.ns.oauth=http://specs.openid.net/extensions/oauth/1.0&amp;
  openid.oauth.consumer=googlecodesamples.com&amp;
  openid.oauth.scope=http://docs.google.com/feeds/+http://spreadsheets.google.com/feeds/+http://www-opensocial.googleusercontent.com/api/people/
  </code></pre>
  
  <p><a href="https://accounts.google.com/o/openid2/auth?openid.ns=http://specs.openid.net/auth/2.0&amp;openid.claimed_id=http://specs.openid.net/auth/2.0/identifier_select&amp;openid.identity=http://specs.openid.net/auth/2.0/identifier_select&amp;openid.return_to=http://googlecodesamples.com/hybrid/index.php&amp;openid.realm=http://googlecodesamples.com&amp;openid.mode=checkid_setup&amp;openid.ns.ui=http://specs.openid.net/extensions/ui/1.0&amp;openid.ns.ext1=http://openid.net/srv/ax/1.0&amp;openid.ext1.mode=fetch_request&amp;openid.ext1.type.email=http://axschema.org/contact/email&amp;openid.ext1.type.first=http://axschema.org/namePerson/first&amp;openid.ext1.type.last=http://axschema.org/namePerson/last&amp;openid.ext1.type.country=http://axschema.org/contact/country/home&amp;openid.ext1.type.lang=http://axschema.org/pref/language&amp;openid.ext1.required=email,first,last,country,lang&amp;openid.ns.oauth=http://specs.openid.net/extensions/oauth/1.0&amp;openid.oauth.consumer=googlecodesamples.com&amp;openid.oauth.scope=http://docs.google.com/feeds/+http://spreadsheets.google.com/feeds/+http://www-opensocial.googleusercontent.com/api/people/" rel="nofollow">Click here to visit link above</a></p>
  
  <p>If you click the link, note how it prompts for access to Email/Country/Language, in addition to Docs and Contacts.</p>
  
  <p>If I replace these 3 parameters with my values:</p>
  
  <pre><code>openid.return_to=http://2.myapp.appspot.com&amp;
  openid.realm=http://*.myapp.appspot.com&amp;
  openid.oauth.consumer=myapp.appspot.com&amp;
  </code></pre>
  
  <p>It still displays the login page, but only asks for Email/Country/Language...no mention of Docs/Contacts.</p>
  
  <p>The app domain is registered and verified with Google - am I missing something? If I implement OAuth separately and generate an auth URL for Docs &amp; Contacts, it works fine...but I would really like to do everything in one step with this hybrid approach, if possible.</p>