I was looking at Full-stack development in Project IDX
The current way of accessing a server without logging into google is generating a access token.
Not only does the token grant total access to the workspace, if an API use webhook, the API will try to make request onto the server on IDX, and on facebook API at least, there’s no way to set "Authorization: Bearer $ACCESS_TOKEN" (at least from what I know, feel free to correct me)