Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Token Revocation #422

Open
MelbourneDeveloper opened this issue Jun 18, 2022 · 3 comments
Open

Token Revocation #422

MelbourneDeveloper opened this issue Jun 18, 2022 · 3 comments

Comments

@MelbourneDeveloper
Copy link
Contributor

This is a question more than a bug. It doesn't seem as though there is a way for a user to revoke an access token using googleapis_auth. I don't think this is a problem per se because revoking tokens doesn't seem to be a typical procedure. However, my assumption was that any app that uses OAuth tokens should explicitly revoke them when the user signs out of the app. There is an OAuth spec for this. Some Google docs seem to indicate that it's possible, but don't mention anything about best practices.

I'm just wondering if the dart APIs would benefit from code to revoke tokens...

@frgmt
Copy link
Contributor

frgmt commented Jun 19, 2022

@MelbourneDeveloper You can use disconnect(). Revoked by this function.

@MelbourneDeveloper
Copy link
Contributor Author

@MelbourneDeveloper You can use disconnect(). Revoked by this function.

Sorry, this is regarding the googleapis_auth package - not google_sign_in @frgmt

@frgmt
Copy link
Contributor

frgmt commented Jun 20, 2022

@MelbourneDeveloper Oh, yes, my apologies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants