Thanks Mihai.
I have read the flow of Google OAuth2 flow. I have some confusion and hope you can help clarify it.
Here is my understanding:
0. Assuming the user just launched my app for the first time.
1. I produce a UIWebView in my app and load it with the Google OAuth2 request url (with all necessary parameters).
2. Google will then return me the login page and I display it in the UIWebView.
3. User input the username and password and tap "sign in"
4. Google will return the consent page in the UIWebView and ask user's approval.
5. User tap "permit"
6. Google will then return the "code" as the title of the returning page.
7. I get the "code", then ask for "token" for the following steps (Google Reader API calling, etc)
Ok, I understand the above steps. But they are for the first time usage, right?
What then if the user launches my app for the 2nd and following times?
Should I store the "code" value in my app and if the user gets in my app again, I just begin from step 7?
What I should do to avoid the user to input their username and password again?
Thanks
On Monday, June 25, 2012 7:21:23 PM UTC+1, Mihai P. wrote: