Google Oauth not getting refresh token

Question

I am trying get refresh token. I read about it in google documents. Now, I am using accesstype offline and also approval_prompt: "force" But I am not getting refresh token in response. I not getting what I am doing wrong.

I have following html code:

<input type="submit" class="btn btn-info" value="Google" onclick="authorizeWithGoogle()" />

Javascript code:

 var cid = 'XXXXX';
 var apik = 'XXXXX';
 var scopes = 'https://www.google.com/m8/feeds';

 function authorizeWithGoogle() {
     gapi.client.setApiKey(apik); 
     gapi.auth.authorize({ client_id: cid, scope: scopes,  accesstype: "offline"   ,approval_prompt: "force"}, handleAuthResult);
 }

 function handleAuthResult(authResult) {
     delete authResult['g-oauth-window'];
 if (authResult && !authResult.error) {
    console.log(JSON.stringify(authResult));      
 }
}

Can you please help me.

Check this out, maybe this can help http://stackoverflow.com/questions/8942340/get-refresh-token-google-api — Robin Carlo Catacutan, Apr 24 '15 at 23:46

score 3 · Accepted Answer · answered Apr 27 '15 at 08:02

You don't want to be requesting refresh tokens as that negates the security of OAuth. Refresh tokens should only ever be requested/stored on a server. You might want to take a step back and review your understanding of OAuth before continuing. Trying to implement OAuth without understanding it is a pita.

For a browser client, you should simply keep calling gapi.auth.authorize whenever you need a new access token (eg. approx every hour). After the first call, you can set immediate=true which will suppress any UI.

thank you for reply. I read again and yes I have to get refresh token from server request. Apologies. — rovy, Apr 27 '15 at 16:27

score 0 · Answer 2 · answered Apr 25 '15 at 20:06

0

First, you made a typo, it's missing the underline: it's access_type, not accesstype.

Then, additionally to pass access_type and approval_prompt, you need to make sure your test user removed the grants for your app. Login in Google with your test account (not your app account) and go to Account Permissions and remove your app from the list.

answered Apr 25 '15 at 20:06

Rael Gugelmin Cunha

3,327
30
25

if I change to access_type it is giving me error. access_type 'offline' not allowed for response_type token – rovy Apr 26 '15 at 17:31
You need to pass `access_type` and `approval_prompt` at authorization code request, not during token request (i.e., when `response_type` is `code`). – Rael Gugelmin Cunha Apr 26 '15 at 19:24

Google Oauth not getting refresh token

2 Answers2