google / google/GoogleSignIn-iOS

iOS - Google Sign in - Revoked IDToken remains active until the token expire

オープン
#531 コメント 1 件 リアクション 0 件 担当者 0 名 GitHub で見る
bug
主要言語
Objective-C
スター
750
フォーク
282
平均マージ
2日 15時間
マージ済み PR(30日)
9

説明

I'm using - GoogleSignIn (7.1.0) framework in my iOS application and I can see that the token seems valid until the expiration date is reached. I use the accepted approach as called has Previos Sign In and calling restorePrevios Sign in, but the received user object still contains the user's data. I have tried Apple and Facebook login, but both of them revoked the access as soon as the Application permission was revoked, only Google keep sending it.

The code snippet, I used:
(if GIDSignIn.sharedInstance.hasPreviousSignIn() {
GIDSignIn.sharedInstance.restorePreviousSignIn { user, error in)
}
})

I have also tried calling https://oauth2.googleapis.com/tokeninfo?id_token=\(idToken) which responded 200 after 15 minutes of the permission revoke, so it looks like the token is fully valid until the expiration data

It's important for us that the user can still access his account for some time and will be deleted in about 2 hours after the token creation, which is super annoying.
I have attached a screenshot about the GIDGoogleUser, which contains all the data, it was about 5 minutes after the permission revoke.

![Image](https://github.com/user-attachments/assets/c08d9dc4-1d48-41a7-a020-96e581bd4fd0)

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。