Starting January 4 Google will block sign-ins from embedded browser frameworks
I don't know why this is here, because this requirement has been in place for years - e.g. I've hit it at least two years ago where Google OAuth didn't allow builtin old WebKit login anymore.<p>Instead, you need to call users' default browser (Firefox, Chrome, whatever they have) and it'll return back with the token. Just like OAuth on desktop.<p>It's much, much safer, because the app can't see or hijack the login process - it doesn't get access to the login form and can't phish you with it.<p>The utter ignorance in comments here is really depressing, what happened with HN?