Security in Google Api Oauth

April 15, 2022

Interesting findings while integrating with Google API

Google, as a Cloud Mega Corporation, is making tons of services available to it’s customer. Thus it needs comprehensive mechanisms for authentication. From what i see, it heavily relies on the oAuth2 standard. Which is more good than bad :)

When you are requesting the offline_access for the second time - it will not give you a refresh token haha. because you’ve fucked up with the refresh token at the first time :)

https://stackoverflow.com/questions/10827920/not-receiving-google-oauth-refresh-token

comments powered by Disqus