Detect revoked SSO tokens

[Michael Vogt]

Hi,

when the ubuntu-sso-client has a token it would be great if it could check if that token is still valid and if
not request a new token. If its not done in the sso client it will be code that needs to be written in all apps
that use the client to ensure that the token in use is valid and the user has not revoked it since.

Thanks,
 Michael

[Michael Vogt (mvo)]

I added a ubuntu task as I believe a persistent oneconf sync failure I got during the maverick cycle is caused by this issue (the token was revoked but the desktopcouch based tools assumed that if it comes from ubuntu-sso-client its valid and did not manage to recover).

[Natalia Bidart (nataliabidart)]

Michael and rest,

I've been thinking about this issue and I realized that if we check the validity of the tokens on each request, this will imply that the token retrieval will be network dependent, and we want to avoid that.

We may make public the validate_user method call through DBus. That way, any app is responsible to validate the token if they consider is necessary and if the know they have net conn.