title: Implementing Account Linking - queries
body: <p>I've asked a Google Dev Advocate for help as I'm struggling to implement Account Linking on my Google Actions app, he sent me a link to a documentation article I already had read and suggested I also consult Stackoverflow. Having already done the second suggestion too and having struggled to find the exact answers to my questions, I've deiced to link to the doc article here, add all my queries and send this back to the Dev Advocate in the hope to get more clarification, especially as a reminder that Documentation could be read by complete newbies on the topic and that nothing should be given for granted.</p>
  
  <p>This is the article I am referring to <a href="https://developers.google.com/actions/identity/account-linking" rel="noreferrer">https://developers.google.com/actions/identity/account-linking</a></p>
  
  <p>My queries below:</p>
  
  <ol>
  <li>What is the difference between implicit and authorization code flow. In the article "Authorization code" is chosen, why?</li>
  <li>Although I have found <a href="https://stackoverflow.com/questions/44218120/authenticate-google-calendar-on-api-ai-with-google-actions">on Stackoverflow</a> where to get your Client ID and secret, don't you think it would be good to add a link in the article?</li>
  <li>Authorization URL - this is something instead I haven't found a clear guide for. Some <a href="https://stackoverflow.com/questions/44218120/authenticate-google-calendar-on-api-ai-with-google-actions">Stackoverflow tickets</a> report 2 Google OAUth URLs can be used (For the Authorization URL, enter <a href="https://accounts.google.com/o/oauth2/v2/auth" rel="noreferrer">https://accounts.google.com/o/oauth2/v2/auth</a>
  For the Token URL, enter <a href="https://www.googleapis.com/oauth2/v4/token" rel="noreferrer">https://www.googleapis.com/oauth2/v4/token</a>), but <a href="https://stackoverflow.com/questions/44288981/how-to-authenticate-user-with-just-a-google-account-on-actions-on-google/44296039#44296039">a recent change to google policy</a> suggests </li>
  </ol>
  
  <blockquote>
    <p>When implementing account linking using OAuth, you must own your OAuth endpoint</p>
  </blockquote>
  
  <p>So I'm now extremely confused at what I should put in the Aiuthorization URL and Token URL - why isn't this documented in a more basic and clear way? I've also read it needs to be served over HTTPS, what if you're working on local and on a pet project which isn't commercial and you won't be able to pay for HTTPS?</p>
  
  <ol start="4">
  <li>What is Seamless Account Linking and why isn't this explained and documented?</li>
  </ol>
  
  <blockquote>
    <p>If your app supports seamless account linking</p>
  </blockquote>
  
  <ol start="5">
  <li>Where should we whitelist this?</li>
  </ol>
  
  <blockquote>
    <p>Whitelist the following redirect URI: <a href="https://oauth-redirect.googleusercontent.com/r/" rel="noreferrer">https://oauth-redirect.googleusercontent.com/r/</a></p>
  </blockquote>
  
  <ol start="6">
  <li>What are your OAuth 2.0 client configuration details? Where can they be found?</li>
  </ol>
  
  <blockquote>
    <p>In the expanded OAuth 2.0 form, fill out the fields with your OAuth 2.0 client configuration. When filling in scopes, ensure they are space delimited.</p>
  </blockquote>
  
  <ol start="7">
  <li>I don't see the Discovery tab on my Oneplus 3T Google App, where else can I find it?</li>
  </ol>
  
  <blockquote>
    <p>Open the Google app and go to the Discover tab.</p>
  </blockquote>
  
  <ol start="8">
  <li>This is where I get stuck - as many other people on Stackoverflow I get "The account is not linked yet" error. Maybe resolving the issues above will resolve the Account Linking error?</li>
  </ol>
  
  <blockquote>
    <p>Invoke your app. Since it's the first time invoking the app with your Google account, the Assistant notifies you that you must link your account.</p>
  </blockquote>
  
  <p>In addition to those questions, I also have the following:</p>
  
  <ol>
  <li>I would like to get access to the user calendar and user basic info so I've added profile, email and <a href="https://www.googleapis.com/auth/calendar" rel="noreferrer">https://www.googleapis.com/auth/calendar</a> could you confirm these are correct?</li>
  </ol>
  
  <p>Thanks and please remember documentation should be for everyone!</p>