i dont discard the option of oing all the Oauth process manually , i found this cool thread about encryption/decryption of bubble’s data using server side functions.
Also, i don’t know how reliable/error proof is the manual tokens handling , following this for example:
Another interesting thing is to rotate the refresh tokens to make them even more secure, if a malicious user get the refresh token from the user (i.e: Logging in bubble’s editor) it expires and gets another refresh token later, so the refresh token is useless and has to be refreshed: