“This app would like to: Have offline access” when access_type=online

by

I think G does this when your app requests a token and there is still a valid access or refresh token for the user for the scopes in question.

The solution is to revoke tokens when you’re done with them (either on user logout or immediately after authenticating the user) by issuing this request:

https://accounts.google.com/o/oauth2/revoke?token={token}

You don’t have to provide any app credentials, just the token as a URL argument.

(docs here https://developers.google.com/accounts/docs/OAuth2WebServer#tokenrevoke)

I had the same problem and no combination of access_type or approval_prompt values seemed to solve it. Revoking the token did the trick.

I’m not sure how to revoke all outstanding tokens for your app, unless you happened to store them. To test with your own user account, you can manually revoke the existing token for your app here:

https://security.google.com/settings/security/permissions

More Related Contents:

  1. Using Postman to access OAuth 2.0 Google APIs
  2. Gmail API returns 403 error code and “Delegation denied for “
  3. Error: invalid_request device_id and device_name are required for private IP
  4. Sign in with Google temporarily disabled for this app
  5. How to bypass entering authentication code to authorize my code everytime I use the YouTube Data API v3
  6. How can I revoke a JWT token?
  7. Google Home Authorization Code and Authentication with Google Account
  8. Restrict Login Email with Google OAuth2.0 to Specific Domain Name
  9. How does OAuth 2 protect against things like replay attacks using the Security Token?
  10. Why do access tokens expire?
  11. OAuth2 and Google API: access token expiration time?
  12. Does OpenID Connect support the Resource Owner Password Credentials grant?
  13. CORS issue with Google Oauth2 for server side webapps
  14. 403 Forbidden message when calling the v3 Google Calendar API using a Service Account via OAuth 2.0
  15. Why is Google Calendar API (oauth2) responding with ‘Insufficient Permission’?
  16. Is it possible to be able to correctly select any available Google account to use when using authorisation via the JS client library for Drive?
  17. How to specify refresh tokens lifespan in Keycloak
  18. Google APIs Console – missing client secret
  19. Using Oauth tickets across several services?
  20. gapi.auth.signOut(); not working I’m lost
  21. Access to fetch at https://accounts.google.com/o/oauth2/v2/auth has been blocked by CORS
  22. How to renew the access token using the refresh token?
  23. Force google account chooser
  24. Why is there an “Authorization Code” flow in OAuth2 when “Implicit” flow works so well?
  25. What is the purpose of a “Refresh Token”?
  26. Using an authorization header with Fetch in React Native
  27. How can I use Django OAuth Toolkit with Python Social Auth?
  28. What is the purpose of the implicit grant authorization type in OAuth 2?
  29. Where can I get Google developer key
  30. Access to Google API – GoogleAccountCredential.usingOAuth2 vs GoogleAuthUtil.getToken()

Leave a Comment