To get the chromoting host list, pass the OAuth access token as a URL parameter,

remoting/webapp/host_list.js

Index: remoting/webapp/host_list.js
diff --git a/remoting/webapp/host_list.js b/remoting/webapp/host_list.js
index 345ac7f68a88480321591ff83bef22d49822befc..1f9dd0be70efe08f56171384a6a1f75426f210f6 100644
--- a/remoting/webapp/host_list.js
+++ b/remoting/webapp/host_list.js
@@ -91,10 +91,12 @@ remoting.HostList.prototype.refresh = function(onDone) {
   }
   /** @param {string} token The OAuth2 token. */
   var getHosts = function(token) {
-    var headers = { 'Authorization': 'OAuth ' + token };
+    // TODO(simonmorris): Pass the access token in a header, not a URL
+    // parameter, when crbug.com/116574 has a better fix.
+    var params = { 'access_token': token };
     remoting.xhr.get(
         'https://www.googleapis.com/chromoting/v1/@me/hosts',
-        parseHostListResponse, '', headers);
+        parseHostListResponse, params);
   };
   remoting.oauth2.callWithToken(getHosts);
 };