Hacker News Reader

If they allowed oauth token to work like that then that is their (Google's) problem.

It is basically impossible to disallow the token to work that way on a technical level. It would be akin to trying to trying to set up a card scanner that can deny a valid card depending on who is holding it. The only way to prevent it from working is analyzing usage patterns/details/etc in some form or fashion. Similar to stationing a guard as a second check on people whose cards scan as valid.

So it sounds like the trillion dollar corporation can actually do it but they don't want to spend the money too because they are extremely cheap?

Exactly, so charge on usage or cap on usage.

Either the token works for all times, or works until it doesn't, or does not work at all.

Punishing the account for using a token you have vended for the exact same purpose is extremely poor product design.

Well, it looks like they're not allowing it.

Reply on news.ycombinator.com