Comments on The official Google Code blog: Best Practices for User Authentication

So, does that mean that my thunderbird client can ...

2011-03-21T16:19:39.290-07:00

So, does that mean that my thunderbird client can not login automatically anymore (without app specific password)?
That could be a bit annoying. I mean to set up app specific password for every mail client I have.

Hey Google team, I want to use the OAuth 2.0 wor...

2011-03-21T09:48:31.675-07:00

Hey Google team,

I want to use the OAuth 2.0 workflow for Authentication, not for Authorization. Is this possible? I can get the users email adress via https://www.googleapis.com/auth/userinfo#email which is enough user information for me, but a userID would be better. In this OAuth 2.0 flow, the user is always promt to give the App permission. How can I skip that part, and redirect the user straight to the app?

Great writeup. Thank you.

2011-03-20T18:47:46.847-07:00

Great writeup. Thank you.