I’m using dotNetOpenAuth to authorise against Google oAuth provider.
I’m a bit confused with the difference between the following:
consumerToken, consumerSecret, accessToken
From the Provider I get the accessToken for some user. Can keep I it forever? Or does it expires?
How can the code enable authorization without redirecting the user to the “allow access to my google data page” ?
Never expect have any expectations about lifespan of
accessToken. At any time you can be given 403 HTTP error which should trigger on of the following in your app:refreshToken, get a newaccessTokenwithout resource owner (end user) interaction