Reputation: 25
I am implementing a personal project that uses the Google SDM API. In this page Google describes the authorization flow for the API. The authorization code is used to obtain the initial access and refresh tokens.
On a long running application the refresh token is used to get new access tokens.
If I am not persisting the refresh token between executions, or if the refresh token expires, then I need to run the authorization request again.
My question is: is the authorization required only once for a given project id and client id? I.e. if I store the authorization code then should I be able to get a new pair of access and refresh tokens? It is not clean for me how long the authorization code will be valid for.
Upvotes: 0
Views: 14