AuthSub

Google's AuthSub page describes the authentication process like this:

I think that most applications will want to use the session-based api key for repeated access to Google's webservices instead of the one-time-use token that you can easily get through the AuthSub method. So the steps of Authentication (in terms of module development) are like this: