Protect user accounts with Cross-Account Protection

[jaspermayone]

See https://developers.google.com/identity/protocols/risc

[miretskydatwit]

@jaspermayone has this been done yet? Is this something I could do? I see you put this as nice to have so if you and Logan have other priorities, lmk if this is something I could work on.

[jaspermayone]

It hasn't been done yet! Feel free to take a stab if you want!

[miretskydatwit]

I would need access to the google project or whatever it's called tho, right?

[jaspermayone]

I think it's enabled already, if not logan or I can pop in and turn it on whenever ur ready. Rly 99% of the implementation is on our side

[miretskydatwit]

Wdym enabled already? Don't I need the login for the calendarwit email?

[jaspermayone]

I mean like the setting might already be on

[jaspermayone]

U dont rly need to be able to login to implement this :)

[miretskydatwit]

Wdym? I read the article you linked, it sounded like it has to be implemented in the project on Google? Or did I misunderstand?

[Cattn]

I don't think this is needed? Maybe only for the admin panel. But if a users google acc were hijacked, they couldn't do anything with it in regards to the extension/calendar. They still need to be logged into their WIT acc to manage the calendar