Google OAuth2: Programatically revoking a specific refresh token (but not access to app)

StackOverflow https://stackoverflow.com/questions/22182514

  •  05-06-2023
  •  | 
  •  

Frage

The application I'm working stores multiple refresh tokens for a given (Google Account, App) pair.
When deleting a refresh token from our database, we'd like to invalidate this token, but not any other currently valid refresh token issued for the same (Google Account, App).
Using https://accounts.google.com/o/oauth2/revoke?token={token} seems to invalidate all refresh tokens for (Google Account, App).
Question: is there a way to invalidate a single refresh token?

War es hilfreich?

Lösung

I am guessing that currently there is no way.

Lizenziert unter: CC-BY-SA mit Zuschreibung
Nicht verbunden mit StackOverflow
scroll top