Answer the question
In order to leave comments, you need to log in
Answer the question
In order to leave comments, you need to log in
I have a feeling that in the official application it would not be stored in clear text
“If the app developers have done everything according to the guidelines from Google, then the password is not stored on the device.”
Very well kept:
It's important to understand that AccountManager is not an encryption service or a keychain. It stores account credentials just as you pass them, in plain text. On most devices, this isn't a particular concern, because it stores them in a database that is only accessible to root. But on a rooted device, the credentials would be readable by anyone with adb access to the device.
As far as I remember, the official app uses AccountManager.
And I doubt very much that OAuth is used, because we are not asked about the permissions available to this application. In my opinion, a direct api is used with authorization and with the issuance of a token.
Well, how to pull it out, see code.google.com/p/android/issues/detail?id=10809
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question