Sign in with Google: how OAuth lets an app in without your password
Refresh token: how an app keeps working when you are not there
Some apps keep using your Google account at 3 am, while you sleep, days after you signed in. How do they do it without your password, and how do you cut them off?
-
1
Every Sunday at 3 am, Rono's app plans the month from every member's calendar. It reaches for yours, but the access token it holds ended days ago, and the calendar refuses it.
-
2
It could send you back to Google to sign in again. At 3 am, every Sunday? Nobody would stay in the club.
The rest of this episode is for subscribers
Subscribe to read every premium episode. You can cancel when you want.
Paid yearly: $99 instead of $119.88