body: I know that you need to ask the user for permission to use cookies. However I use OAuth from Google Firebase. OAuth works with tokens instead of cookie-authentication, however, for the user it makes no difference. She/he gets authenticated across pages. Since I didn't find anything regarding "permission for tokens", I assume that I don't need it. Is this right? Any legal proof would be awesome.
  
  
  
title: Do I need to ask for permission to use tokens?