Google Provider
Authentication
Keep Google auth, token refresh, and permission boundaries outside the presentational UI.
Guidelines
- authenticate before mounting privileged Drive screens
- keep token refresh in your server or auth integration layer
- map product permissions to Google capabilities explicitly
- fail closed when access to a folder or file cannot be verified
The Drive UI should not be responsible for provider authentication. It should only consume an already-authorized provider surface.