[Touch-packages] [Bug 1594841] Re: Systemic failure in handling of OAuth revocations

2016-07-13 Thread Alberto Mardegan
Just found this (read near the bottom): https://gist.github.com/arirubinstein/fd5453537436a8757266f908c3e41538 It appears that Google might have an *undocumented* API to exchange an API token for a web session. I'm not suggesting that we use it, I'm just linking it here for reference. -- You

[Touch-packages] [Bug 1594841] Re: Systemic failure in handling of OAuth revocations

2016-06-21 Thread Alberto Mardegan
There are two completely separate issues here: 1) The webapp authentication problem is real, and works exactly as you described. It's a trick to improve the first-time experience of the webapps, and it's not reliable in any way. However, let's discuss it in a separate bug report, please (we