CODEWITHSUNDEEP
angularjsgoogle-account
Herring
Herring

Reputation: 173

How to logout from Google Account using AngularJS

The solution I've come with was:

/**
 * Signs the user out.
 */
HeaderCtrl.prototype.signOut = function() {

  // this part revokes token
  $http.jsonp('https://accounts.google.com/o/oauth2/revoke?token=' +
      accessToken, {
        params: {
          callback: 'JSON_CALLBACK',
          format: 'json'
        }
      }).success( /* Do stuff on success */);

  // this part logs out from google account
  $http.jsonp('https://accounts.google.com/logout');
};

The second call works but logs an error on response processing:

Refused to execute script from 'https://accounts.google.com/logout' because its MIME type ('text/html') is not executable, and strict MIME type checking is enabled.

What ways to log out from Google account using AngularJS would you use?

Upvotes: 0

Views: 3998

Answers (2)

dotpush
dotpush

Reputation: 428

I think you are tring to do many things that are not related to a "normal logout" experience.

Maybe you should talk to your "customer" to clarify the user stories he/she wants.

A normal logout is one line of js (source) : 

gapi.auth.signOut();

If I'm not wrong, what you are doing first in your code (ie revoking the access token), is something that provides an option to remove the association between the account on your app and the google account used for sign-in. As indicated on the link, you must provide this option to the user to follow the g+ developer policies but it's not the same as signing out. Maybe you should try, as a user, these two feature on a site providing a g+ sign-in, such as stack overflow. (Be sure to know your password before revoking the g+ association.)

And for the log out of Google, your app should not do it, and Google should not provide you a way to do it. (And I'd rather think that it's impossible.)

However you can kindly remind your user, after log out, that he/she may need to log out from Google too. Try to log out from stack overflow and look at what happens.

Upvotes: 2

ngasull
ngasull

Reputation: 4216

you should not log out your users from Google, they certainly don't want it anyway. Thus, https://accounts.google.com/logout should never be reached.

What you actually want is to make them log out from your website. Revoking the token should be enough for Google authentication's side (your website won't assume the client is logged from to his old token)

Once signOut method is called, just consider he isn't logged any more and end the session in your website.

Upvotes: 2

Related Questions