获取Google OAuth2授权帐户

Question

I have authorised multiple accounts via Google's OAuth2. How do I get a list of accounts that I have authorised? I want to be able to revoke access.

To make it clearer, I go through the OAuth2 flow multiple times, each time selecting a different account. Then, I get the access/refresh token and save it to my database. By doing that, I noticed that I still get access to resources not tied to the latest account but also those that are tied to previously authorised accounts. I want to be able to list and allow my users to revoke access to these accounts.

Answer 1

There is no way to get a list of the users who have authenticated your application. I have this problems as well because I have a number of users who are still using a very old version of my application who i would like to inform them they should upgrade but i cant as i have no contact to them.

Revoking access of known users:

Your application can have as many users as you want authorized to it. The refresh token gives you access to each of the users data. The access will remain until the user revokes it or the refresh token hasn't been used for six months.

You can revoke it programmaticly by revoking the token

Try using:

$client->revokeToken(); 

This should revoke the old access given by a user. You will have to load the old refresh token into the client of course.