hhhapz

im selfhosting casdoor

i looked through the source and see something related to being able to send a "GoogleID-${token}" so i'll probably do something like that

because the alternative would be showing the google login page to a user in a webview, which is not allowed by google: https://stackoverflow.com/questions/65353812/web-google-auth-workaround-for-403-disallowed-useragent-exists

if i fake the user agent in the webview, then they have to manually enter their google credentials even if they already have it stored in their phone (so i generate the google access token using the correct method for android)