chrt

OAuth 2 - Google Accounts

Effective date: January 1, 2025

What is CHRT?

  • CHRT is a site that provides software for teachers. Our current services include:
    • Lesson Plan Creator – create a lesson plan for your students by entering relevant course details
    • Coming Soon – modify your existing lesson plans through our suite of tools
  • Future services may include similar offerings such as a curriculum-aligned assignment creator, an automatic grader, a 1-on-1 tutor for students, etc.

What is a Google OAuth2 connection?

  • When you create your CHRT account, you can choose to protect the account using:
    • an email address and a password
    • your existing Google account
  • When you choose to use an existing Google account, you'll sign in to your CHRT account using a process known as OAuth 2
  • OAuth 2 involves redirecting you from our login page to Google's authentication servers. Upon successful authentication with Google, you are redirected back to CHRT's site with permission to access your CHRT account.
  • When CHRT redirects you to Google, our service includes requests for certain data (defined by parameters known as "scopes", such as your name, email address, etc.) which are returned to us if you authenticate successfully
  • This page describes what scopes we request, why we request them, and what we do with the data from your Google account

What data (scopes) does CHRT request?

  • Non-sensitive scopes:
    • ./auth/userinfo.email – See your primary Google Account email address
    • ./auth/userinfo.profile – See your personal info, including any personal info you've made publicly available
    • openid – Associate you with your personal info on Google
    • drive.file – Create new Drive files, or modify existing files, that you open with an app or that you share with CHRT while using the Google Picker API or CHRT's file picker.
  • Sensitive scopes:
    • none
  • Restricted scopes:
    • none

How does the Google OAuth 2 connection user data enhance user functionality?

  • The biggest enhancement is simply the ease of creating an account and signing in using your existing Google credentials.
  • Your name and email address are used in our application to communicate with you and are displayed, at your discretion, on your account profile.
  • In the future, if we request additional scopes (such as calendar data, etc.), we'll need to update this page and get your individual consent before Google grants CHRT access to those scopes and data.

Why use a Google OAuth 2 connection for a CHRT account?

  • It's very convenient.
    • You can create a CHRT account without creating and remembering a new username and password.
    • You can authenticate (sign in) using your Google credentials, which might already be stored in your browser, especially if you use Google Chrome.

Developer Docs for OAuth 2.0 Scopes for Google APIs