GNOME Online Accounts - Single sign-on framework for GNOME
==========================================================


Facebook
--------

OAuth 2.0: https://developers.facebook.com/docs/authentication/
Scopes: https://developers.facebook.com/docs/authentication/permissions/

Notes:
The client-side flow returns the access_token and expires_in in the URI
fragment, and does not provide a refresh_token.


Flickr
------

OAuth 1.0: http://www.flickr.com/services/api/auth.oauth.html


Google
------

OAuth 2.0:
https://developers.google.com/accounts/docs/OAuth2InstalledApp
https://developers.google.com/oauthplayground/

Scopes:
https://developers.google.com/accounts/docs/OAuth2Login
https://developers.google.com/google-apps/calendar/auth
https://developers.google.com/google-apps/contacts/v3/
https://developers.google.com/google-apps/documents-list/
https://developers.google.com/google-apps/gmail/oauth_protocol
https://developers.google.com/talk/jep_extensions/oauth

Notes:
We are allowed to embed the client_secret in the source code. See
https://developers.google.com/accounts/docs/OAuth2InstalledApp#overview


Windows Live
------------

OAuth 2.0: http://msdn.microsoft.com/en-us/library/live/hh243647.aspx
Scopes: http://msdn.microsoft.com/en-us/library/live/hh243646.aspx

Notes:
We do not need the client_secret because we are marked as a desktop or mobile
application, and we use https://login.live.com/oauth20_desktop.srf as the
redirect_uri.
