Limits of Least‑Privilege Scoping in Android AccountManager
Unresolved Decision on Scope Enforcement The Android AccountManager API allows apps to request authentication tokens with specific scopes via getAuthToken() . The underlying authenticator is responsible for filtering scopes, but the framework does not impose any additional limits when multiple applications share the same authenticator. When a token expires,
android