I need to develop
Android apps that should have to communicate with a server throught
RESTfull API. Also I need to register and authorize user throught popular social networks like Facebook, Twitter, Google.
What is the best scenario of doing that? For example: I generate
access_token in my mobile app and then sending it to the server like
example.com/auth?google?<access_token>. Could somebody stole my
access_token then get access to the user's personal info or to the user's account?