google / google/GoogleSignIn-iOS

Address VwG non-interactive flow (token refresh).

Open
#439 1 comment 0 reactions 1 assignee Claimed by @brnnmrls View on GitHub
enhancement
Dominant language
Objective-C
Stars
750
Forks
282
Avg merge
2d 15h
Merged PRs (30d)
9

Description

Completing the interactive flow for VwG, one of the next steps is to consider the non-interactive flow. This portion starts whenever the user has already been verified or in the case they need to refresh.

We want to provide requesting parties with the ability to refresh VwG tokens. There's two solutions where one is more suitable timing wise and the other is more complex but addresses two issues regarding the auth state that the first will not:
1. (easy solution) We will provide the requesting party with an API that holds a method to manage the token refresh. This API will require developers to pass in their refresh token string, which we will use to create the refresh token request.
- There are two limitations which are addressed by the more complex solution: 1) GSI attaches authorization state holding the tokens on [GIDGoogleUser](https://github.com/google/GoogleSignIn-iOS/blob/main/GoogleSignIn/Sources/Public/GoogleSignIn/GIDGoogleUser.h#L54-L64). 2) GSI saves tokens to the device chain.
2. (complex solution) Adding token refresh to GIDGoogleUser.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.