brownhead/galah — pull request #74 by paranoiacblack (2012-11-07 15:34:03+00:00)
Title: Reimplemented OAuth2 support to validate credentials with tokeninfo endpoint

This change makes oauth2login fit the style of api_client by being self-contained and taking advantage of the configuration system. It also adds various checks to verifying whether or not the credentials used to log in are valid. Specifically, it verifies the access_token with the Google servers and then checks that the Google App the credentials came from matches Galah's and that the email used with the credentials is the same email the user wants to log in as.