Sign in with Google: how OAuth lets an app in without your password
Access token: what an app can open in your Google account, and for how long
An app you signed in to with Google can open parts of your Google account without your password. What exactly can its access token open, and why does it stop working so soon?
-
1
Rono's app holds two tokens now. It asks Google Calendar for your evenings and adds one of them to its request: the access token. The calendar checks it and answers. No password anywhere.
-
2
That token came from your Google account. Could the app open your email with it as well?
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88