Incremental OAuth for Google

Share:

Google has changed their OAuth user experience so that by default, a user will not give any permissions unless they take additional actions when an app requests more than one permission at a time. They’ve also changed their permissions for the supported People API so that we need to request access to read “Contacts” as well as “Other Contacts” to provide the expected behaviour where people see all the contacts that they normally would in their Gmail account. We’ve mitigated this by implementing an incremental OAuth request strategy to request a single permission at a time.

Graeme Rouse, CTO at CloudSponge

Follow @thunderouse

Comments

Try CloudSponge for free in your
testing environment

Get Started

Have a questions or prefer a guided tour?
Schedule a consultation with our Founder.