We have our webapp integration working using the secure AuthSub
authentication mechanism.  But we have noticed a potential usability
issue with it.   Say a user has two Google accounts - Username1 and
Username2.  They link us to Username1 account and we display that they
are linked.  Then they log off of Google, and later on log onto
Username2 account.  They then use our application to push data to
their Google health record.  The data appears in Username1 account as
it should, but since they are logged into Username2 account it may
look at first glance to them like the data was not sent.   I
understand this is the proper and expected behavior, but to new users
it might seem confusing.  (We have had some people be confused by it
already.)

I think it would help usability if we knew the Google account
username, because then we could display to the user that we pushed
data to the Username1 account.   I don't see any way with the AuthSub
api that I can get the username associated with a given AuthSub
token.   Did I miss something, or is this not allowed?    If it is not
allowed, is it something I could reasonably request as a feature
enhancement -- it doesn't seem like a security breach to me since it
is only the username and not the password...


Thanks for any info about this,

Laurie Tynor

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Health Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/googlehealthdevelopers?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to