Eric Seidel

I think @hann-yun is referring to the prompting we do in `shorebird patch`. Sounds like two issues: 1. That we're listing the versions in ascending rather than descending order? 2....

Yeah, we should paginate for sure. Thank you!

One thing we could do here is warn about reachability. e.g. from `shorebird doctor` or otherwise.

In this case I think oauth2.google.com is the unreachable URL?

The real fix for these is to fall back to remote-based OAuth, like what Firebase does: https://github.com/firebase/firebase-tools/blob/master/src/auth.ts#L543 https://github.com/firebase/firebase-tools/blob/master/src/auth.ts#L399 `firebase login --no-localhost` will also do this explicitly and is what IDX...

This should be really easy to do on the command line side. The only real work is on the web side. I don't know exactly what auth.firebase.tools does. https://github.com/firebase/firebase-tools/blob/ab05bb78f7fd5660394f97df150af322cf22f82f/src/api.ts#L8

I mentioned this to @rodydavis when I saw him last month. He mentioned that he knows the engineer at Firebase who implemented auth.firebase.tools and might be able to get us...

Thanks. Although to clarify, we wouldn't use auth.firebase.tools itself, we'd stand up a server *like* auth.firebase.tools, I'm just not sure exactly what that server does. :) Regardless, if there is...

I spoke with Rody again last night. My understanding of how Firebase does this with IDX is that IDX sign-in includes a Firebase.com scope, where as the OAuth token which...

I see, so .dex files contain path-sensitive content. That's really unfortunate.