Re: Token Expiration != 24 hours - Feris Thia - com.googlegroups.google-calendar-help-dataapi

6 messages in com.googlegroups.google-calendar-help-dataapiRe: Token Expiration != 24 hours

From	Sent On	Attachments
Feris Thia	26 May 2008 19:44
Ray Baxter	26 May 2008 22:27
Feris Thia	26 May 2008 22:34
Ray Baxter	26 May 2008 22:52
Ray Baxter	26 May 2008 22:56
Feris Thia	26 May 2008 22:58

Subject:	Re: Token Expiration != 24 hours
From:	Feris Thia (fer...@phi-integration.com)
Date:	05/26/2008 10:34:27 PM
List:	com.googlegroups.google-calendar-help-dataapi

Hi Ray,

On Mon, May 26, 2008 at 10:27 PM, Ray Baxter <ray....@gmail.com> wrote:

Hi Feris,

Where do you read that the ClientLogin token is valid for 24 hours?

In Google documentation itself. See it here :

http://code.google.com/apis/apps/gdata_provisioning_api_v2.0_reference.html#Authentication

Have a look at the note :

*Note:* Authentication tokens expire after 24 hours. As such, you will

need to submit a request to the above URL at least once every 24 hours. We recommend that you keep the token in memory rather than writing it to a file. If you encounter a CAPTCHA challenge while obtaining an authentication token, the knowledge base<http://code.google.com/support/bin/answer.py?answer=55394&topic=11282>provides instructions on how you can handle it.

I have only found this:

The token remains valid for a set length of time, defined by whichever Google service you're working with.

from here: http://code.google.com/apis/accounts/docs/AuthForInstalledApps.html#ClientLogin

but I haven't found anything particular to the calendar service.

In testing, I have occasionally noticed that the token lasts longer than I expected, but I routinely login each session. The session token and cookie expire after 1 year.

Wow...so, if I get the token sniffed (which is very possible using bare http protocol) by unresponsible persons then he can do anything to my services :(

--~----~------~----~------~--~---

Feris PT. Putera Handal Indotama A Business Intelligence Company Jl. K.H. Moh Mansyur No. 11 B 8 - 12 Jakarta - Indonesia Phone : +6221-30119353 Fax : +6221-5513483 Mobile : +628176-474-525 http://business-intelligence.phi-integration.com