Account SIGN_IN about flask-assistant

[treethought]

hi @wtavares. flask-assistant now supports Account linking via Google Sign in!

To update: pip installl -U flask-assistant

and then check out the account linking example

[wtavares]

Hi @treethought !!!!

Thanks a lot for the fast feedback. Implemented and tested yesterday. Worked like a charm!

One comment and one question:

Comment: The profile and the access_token are not been filled. They are None. There is any trick or init needed? The user dict has all user sent by the DF including the access_token. I'm using it. No problem to me once I'm using my own OAuth2 implementation and validations to build the profile.

The doubt: How to we unlink or invalidate the access_token ate the AoG???? If my user removes their account... the token info is not useful anymore. So... is necessary to "invalidate" or remove the token at AoG. Do you have any idea about how to do this?

Thanks again!
W

[treethought]

Hi @wtavares, currently only Google Sign in is supported. Sounds like you are talking about the access token that is received during OAuth sign in. When using google sign in, you don't receive an access token, but rather a JWT token that is decoded to obtain the profile information.

And do you mean the profile local (imported from flask_assistant) is None after a user signs in?

[wtavares]

Hey Cam! Sorry for the late response. Well... We implemented the account linkage using OAuth + Google Sign in... But I was using the implicit process. The issue was if the user delete their account... there is no way to revoke the TOKEN at AoG. Simple like this... they do not support this. The soluttion was change my OAuth implementation to Authorization Code mode... with this we have the TOKEN expiring and at the TOKEN refresh we revalidate the user account. Worked fine. About your question: importing the profile to check is the user signed in is giving me None. I'm gething the access_token from the user object. Thats it. Thanks for your help. Rgds W

…

On Tue, Oct 22, 2019 at 10:58 AM Cam Sweeney ***@***.***> wrote: Hi @wtavares <https://github.com/wtavares>, currently only Google Sign in <https://developers.google.com/assistant/identity/google-sign-in> is supported. Sounds like you are talking about the access token that is received during OAuth sign in <https://developers.google.com/assistant/identity/oauth2>. When using google sign in, you don't receive an access token, but rather a JWT token that is decoded to obtain the profile information. And do you mean the profile local (imported from flask_assistant) is None after a user signs in? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#119?email_source=notifications&email_token=AC5L7FANK6T7M5B5JGKMRCLQP4BH7A5CNFSM4I7UHHEKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEB52XBI#issuecomment-544975749>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AC5L7FFCU36EU6ZRLOOWZTDQP4BH7ANCNFSM4I7UHHEA> .

-- []'s Washington Tavares