| commit | bbeb2a96e4fb0e83f8c26e5e5de7bfff66528c43 | [log] [tgz] |
|---|---|---|
| author | Shawn O. Pearce <sop@google.com> | Mon Nov 12 12:38:30 2012 -0800 |
| committer | Shawn O. Pearce <sop@google.com> | Mon Nov 12 18:34:34 2012 -0800 |
| tree | aed99e0fd726d9db62209db05eb960e4c3b790ab | |
| parent | e649d848dc9660637db71474a677e1215f385823 [diff] |
Remove AuthMethod and add access token to RestApi Authentication for API calls will be handled using an access token in the "Authorization: OAuth access_token" style. Browsers do not use this when making requests unless they use an XmlHttpRequest. If the value used as the access_token is not available cross-site then the API call cannot be made by hijacking attempts. Change-Id: I33654bcaa247cb95a57b03d2df112ca95e970185