I am using the Publisher JS plugin to place orders. I am currently relying on the JS callback - i.e. the finished() method to receive the access_token. I then use that to invoke the Order API to get the details of the Orders placed.
I see a potential issue here. The finished method gets invoked only when the user clicks on the 'Finish' button on the Order entry panel. However, if he closes the window nothing happens.