Find a solution to embedded credentials.conf about gplaycli HOT 7 CLOSED

Hello.
I wrote a small web service which gives out auth tokens to anyone who asks. Like this:
http://tokendispenser-yeriomin.rhcloud.com/token/email/[email protected]
http://tokendispenser-yeriomin.rhcloud.com/token-ac2dm/email/[email protected]

It has been successfully used for a couple of weeks in my Play Store alternative android app. It stores email-password pairs in a mongodb storage and generates new auth tokens on request. Right now it is deployed on RedHat OpenShift, but can be deployed anywhere.

from gplaycli.

Well, I'll need an explanation on how it works, since it does not seem to require a password. Is the [email protected] account configured in your tokendispenser instance?

from gplaycli.

It stores email-password pairs and asks Google to create a token with a request to https://android.clients.google.com/auth.

I've taken email and password from your credentials.conf and put them into the tokendispenser's db. How you do it is up to you. OpenShift has an option to install rockmongo, so I'm using that. I considered adding a PUT method protected by basic http auth to tokendispenser, but it seems an overkill at this point.

from gplaycli.

Alright, very nice.
How do I use the token? Should it replace the password, or should I modify my code to use a token-way authentication?

from gplaycli.

Instead of
api.login(self.config["gmail_address"], self.config["gmail_password"], None)
Use
api.login(None, None, token_from_token_dispenser)

...i think. Didn't try it.

from gplaycli.

Works like a charm.
I'll need to push it now :)

from gplaycli.

Fixed by 562b53f

from gplaycli.