存储/恢复整个应用程序的快照/状态(Store/Restore snapshot/state of entire application)

 您正在做的最佳解决方案IMO是将OAuth与OpenID结合使用。 你在RP上使用OpenID很好。 但对于需要访问该网站的已安装应用程序，他们应该使用OAuth获得授权。 流程将如下工作： 
 
 
 
 用户在其设备上安装应用程序 
 
 
 在安装或首次启动期间，该应用程序有一个“授权我”按钮。 
 
 
 用户按下按钮，Web浏览器弹出客户端应用程序访问数据所需的网站。 
 
 
 用户使用其OpenID登录该站点 
 
 
 网站现在询问“你想要授权客户端应用程序X吗？” 
 
 
 用户说是并关闭浏览器。 
 
 
 客户端应用程序重新出现并说“谢谢”。 现在具有访问用户数据所必需的OAuth令牌，而无需用户再次登录。 
 

The best solution IMO for what you're doing is to use OAuth combined with OpenID. You're use of OpenID at the RP is fine. But for installed applications that need access to that web site, they should use OAuth to get authorized. The flow would work like this:
 
 
 
User installs app on their device
 
 
During install or on first launch, the app has an "Authorize me" button. 
 
 
The user presses the button and a web browser pops up the web site that the client app needs to access data from. 
 
 
User logs into that site using their OpenID
 
 
Site now asks "do you want to authorize client app X?"
 
 
User says yes and closes the browser.
 
 
The client app reappears and says "thanks." and now has the OAuth token necessary to access the user's data without the user ever logging in again.