i'm developing an android oauth login system.So i had generate acess_token ,expire_in and refresh token properly.I also develop a web service to store client id and client secret.and these web app also using the keep user acess_token and other user data.So i have some few doubt in the savings acess_token in the web service.
- first user get the acess_token and login to the app do some work and log out,So when he re login to the app how i recognized these mobile user already have and acess_token or not having the acess_token ? (Because i store the acess_token in the web app)
- how can i identify android device uniquely? (i want to store acess_token with the android_id in the web app,because can i track this device user have an acess_token and direct go to the user profile )
any one can help me it's very usefully to me. Thank you