'Token has been expired or revoked' - Google OAuth2 Refresh token gets expired in few days

Question

I am using google analytics api to fetch analytics data. I tried to authenticate it using following steps : -> created OAuth client id in https://console.developers.google.com/ credentials section. -> In consent screen I had set publishing status as testing -> In OAuth 2.0 Playground I got the refresh token using above generated client id and client secret -> Then I am using it to generate access token through it.

But After few days refresh token seem to expire again and again although it is mentioned that refresh token validity is life long.

question from:https://stackoverflow.com/questions/66058279/token-has-been-expired-or-revoked-google-oauth2-refresh-token-gets-expired-i

Answer 1

I needed to send mails from a gmail account that I have access to, using nodemailer. It works for a couple of days before my refresh token is mysteriously revoked, even though the account belongs to me. A google search brought me here and I had been watching for a while hoping someone would help with a solution.

As you mentioned, this seems to happen with only test/unverified apps and I'm guessing google revokes tokens for such applications in your account after a few days. After much trials and errors, here is what I did.

NOTE: This is solution is only applicable to accounts you own, otherwise you must verify your app to access other people's accounts

1. Generate a new refresh token (existing one is most likely revoked) as described in this SO post
2. Go to the security tab of your google account dashboard
3. Under the Recent security activity section, you should see a security alert for your app.
4. Click on the context menu next to the notification and click DISMISS
5. At this point you'll be presented with a dialog of options where you indicate the level of trust you have for the app. I just went ahead and said I trusted the developer/app, obviously. And that's it! The refresh token should persist after this.

I could not find anything related anywhere else. So, please, accept this answer if it works for you. It might help someone else