这肯定是可行的。来自Android AccountManager文档：

Many servers support some notion of an authentication token, which can

be used to authenticate a request to the server without sending the

user's actual password. (Auth tokens are normally created with a

separate request which does include the user's credentials.)

AccountManager can generate auth tokens for applications, so the

application doesn't need to handle passwords directly. Auth tokens are

normally reusable and cached by AccountManager, but must be refreshed

periodically. It's the responsibility of applications to invalidate

auth tokens when they stop working so the AccountManager knows it

needs to regenerate them.