skinny.

Latest / Logosofia no Dia a Dia

What Happens When You Click "Connect" on an AI Plugin

When you connect ChatGPT's email plugin to a workspace address and a Gmail address, you tick a few scope boxes and everything just works. But what's actually happening in that moment — and who holds the credential that sends your mail? This episode walks through the OAuth 2.0 authorization code flow with PKCE, explains why you never see a token (it isn't yours to see), and untangles the difference between a user credential and an application credential. Along the way: why revocation is eventually consistent, why disconnecting an app and revoking a grant are two different acts, and how the…

The skinny

The skinny isn't ready yet — notes appear once the transcript is processed.