To get the chromoting host list, pass the OAuth access token as a URL parameter,

remoting/webapp/host_list.js

Index: remoting/webapp/host_list.js
diff --git a/remoting/webapp/host_list.js b/remoting/webapp/host_list.js
index 345ac7f68a88480321591ff83bef22d49822befc..fa9f95a8c5761e86fa17feaa4d9216aedc16abfb 100644
--- a/remoting/webapp/host_list.js
+++ b/remoting/webapp/host_list.js
@@ -91,10 +91,11 @@ remoting.HostList.prototype.refresh = function(onDone) {
   }
   /** @param {string} token The OAuth2 token. */
   var getHosts = function(token) {
-    var headers = { 'Authorization': 'OAuth ' + token };
+    // Use URL parameters instead of headers, only because of crbug.com/116574.

[Jamie, 2012/03/02 20:42:55]

Can you rephrase this as a TODO, since we probably want to fix it at some point.

+    var params = { 'access_token': token };
     remoting.xhr.get(
         'https://www.googleapis.com/chromoting/v1/@me/hosts',
-        parseHostListResponse, '', headers);
+        parseHostListResponse, params);
   };
   remoting.oauth2.callWithToken(getHosts);
 };