google / oauth2l

oauth2l ("oauth tool") is a simple CLI for interacting with Google API authentication.
Apache License 2.0
643 stars 81 forks source link

Improve handling of expired access tokens in cache. #100

Closed andyrzhao closed 4 years ago

andyrzhao commented 4 years ago

oauth2l currently does not invalidate or refresh expired access tokens in the cache, so after one-hour, manual cache "reset" is required to clear the expired access token. Furthermore, when manually resetting cached tokens, even the non-expired tokens are lost. This leads to having to log in many times for 3LO flow.

This problem should be addressed at two levels:

  1. Automatically invalidating expired access tokens, without requiring manual "reset".
  2. If possible, automatically refresh expired 3lo oauth2 access token, via the refresh token.
andyrzhao commented 4 years ago

Fixed by PR #101