Episode Details

When you connect ChatGPT's email plugin to a workspace address and a Gmail address, you tick a few scope boxes and everything just works. But what's actually happening in that moment — and who holds the credential that sends your mail? This episode walks through the OAuth 2.0 authorization code flow with PKCE, explains why you never see a token (it isn't yours to see), and untangles the difference between a user credential and an application credential. Along the way: why revocation is eventually consistent, why disconnecting an app and revoking a grant are two different acts, and how the confused deputy problem turns a service-account-backed tool into a privilege escalation vector — as demonstrated by the Supabase MCP leak in July 2025. If you've ever wondered what's under the hood of a "Connect" button, this is the episode. Episode #206542 — open it directly at myweirdprompts.com/206542