Do we need to wait after an admin accepts an app marketplace scopes for his domain in order to avoid consent screen?

本小妞迷上赌 提交于 2019-11-29 23:16:24

问题


We are integrating our app in the new Google Marketplace. Our marketplace config in the developer console is ok. Our oauth2/sso flow is ok (scopes match the ones setup in the console, auth params ok) All users, when accessing our application through the Navigation bar, don't see any consent screen. All is perfect … except the following :

when an admin user is installing our application for his domain for the first time, he is presented with the domain consent screen displaying the scopes defined in our marketplace config, which is fine, he accepts and is presented with a button "Launch app". This link hit our server and a redirection is made to google auth in order to get the email and profile of that user. The redirection happens quickly that the admin is presented with yet another consent screen displaying the exact same scopes … which is bad. If we wait 10 - 20 seconds before clicking the 'Launch app' button and after having accepted the scopes for the domain, the redirection to google auth is done and no consent screen is presented to the admin.

Are we missing something? Some sort of pooling technique with callback? "Sleeping"?


回答1:


The same happens with other apps available on Google Apps Marketplace.

I installed several apps from Marketplace (Mavenlink, Lucidchart, etc), and they showed exactly the same result. I was prompted with consent screen immediately after installing them. A bit later, and I was let in without prompting.

It seems that the information on the installed app is not immediately propagated through Google system. There is a short delay between the time the administrator installs an app to his domain, and the time that app becomes available on his domain.

Most users wouldn't mind to wait a minute after the installation. Unfortunately, a reviewer at Google is not that forgiving. If he is quick enough to start your app immediately after the installation, your app will be caught asking for consent, for which it will be rejected from Marketplace. Too bad.



来源:https://stackoverflow.com/questions/25014892/do-we-need-to-wait-after-an-admin-accepts-an-app-marketplace-scopes-for-his-doma

易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!