Getting Users info with Google Oauth PHP without refresh tokens

Question

I want to get users info after they login with Google Oauth 2.0. But I keep getting errors asking for refresh tokens after 1 hour. I dont want to use the refresh tokens, as I have set access type for online and approval prompt to auto.

This is the code that is causing issues, in particular I get errors with the get() function.

$service = new Google_Service_Oauth2($client);

if ($client->getAccessToken()) 
    {
          //For logged in user, get details from google using access token
          $user         = $service->userinfo->get();
          $user_id      = $user['id'];
          $user_name        = filter_var($user['name'], FILTER_SANITIZE_SPECIAL_CHARS);
          $first_name       = filter_var($user['given_name'], FILTER_SANITIZE_SPECIAL_CHARS);
          $last_name        = filter_var($user['family_name'], FILTER_SANITIZE_SPECIAL_CHARS);
          $email        = filter_var($user['email'], FILTER_SANITIZE_EMAIL);
          $profile_url      = filter_var($user['link'], FILTER_VALIDATE_URL);
          $profile_image_url    = filter_var($user['picture'], FILTER_VALIDATE_URL);
          $gender       = filter_var($user['gender'], FILTER_SANITIZE_SPECIAL_CHARS);
          $personMarkup     = "$email<div><img src='$profile_image_url?sz=50'></div>";
          $_SESSION['token']    = $client->getAccessToken();
    }

Linda Lawton - DaImTo · Accepted Answer · 2015-02-18 07:17:00Z

1

Refresh the access token, if necessary.

Access tokens have limited lifetimes (One hour to be exact). If your application needs access to a Google API beyond the lifetime of a single access token, you will need to use your refresh token to get a new access token.

A refresh token allows your application to obtain new access tokens.

To answer your question if you want to access your users data for more then one hour it is not possible to do this with out using the refresh token to get a new access token.

answered Feb 18, 2015 at 7:17

Linda Lawton - DaImTo

118k40 gold badges229 silver badges511 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

jm874327 Over a year ago

I dont need to have access to the data, as I am saving it in my database as soon as they log in for the first time. But I am assuming I can't be storing their info unless I have the offline access? Is there a way to get around this?

Linda Lawton - DaImTo Over a year ago

All offline access does is return a refreshToken to you so you can use it without having to request access from the user again.

jm874327 Over a year ago

My end goal is to not have the user keep giving permission for offline access and save their info with the above code. Is this possible without offline access?

Linda Lawton - DaImTo Over a year ago

Save the refresh token you will be able to get a new access token to access the data without asking them again. I think you should read the rfc for Oauth I think you are misunderstanding something some how

jm874327 Over a year ago

So you're saying once the refresh token has been used, next time the user logs in it wont ask for offline access?

|

Collectives™ on Stack Overflow

Getting Users info with Google Oauth PHP without refresh tokens

1 Answer 1

7 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

7 Comments

Your Answer

Sign up or log in

Post as a guest

Related