How do I log out of a chrome.identity oauth provider

Question

I\'m using chrome.identity to log into a 3rd party oauth provider in an chrome extension. It works fine for logging in- when I use launchWebAuthFlow I am presented with the

Answer 1

You should add prompt=select_account to your auth URL. Your problem will be solved.

https://accounts.google.com/o/oauth2/auth?client_id={clientId}&response_type=token&scope={scopes}&redirect_uri={redirectURL}&prompt=select_account

Answer 2

I could achieve result only with this implementation

  chrome.identity.getAuthToken({ 'interactive': false }, currentToken => {
    if (!chrome.runtime.lastError) {
      // Remove the local cached token
      chrome.identity.removeCachedAuthToken({ token: currentToken }, () => {})

      // Make a request to revoke token in the server
      const xhr = new XMLHttpRequest()
      xhr.open('GET', `${googleRevokeApi}${currentToken}`)
      xhr.send()

      // Update the user interface accordingly
      // TODO: your callback
    }
  })

Answer 3

I happened to hit the same problem recently, and I finally solved it by adding login_hint=<new_user> and prompt=consent in the login URL.

Answer 4

For me, https://accounts.google.com/logout does not work. But https://accounts.google.com/o/oauth2/revoke?token=TOKEN work well, using simple window.fetch(url), not with hrome.identity.launchWebAuthFlow.

Answer 5

I am not aware about the specific third party provider. But I faced the similar problem when using Google Oauth with chrome.identity.launchWebAuthFlow(). I could sign in the user, but not sign out using removeCachedAuthToken()

In this case, to logout the user, I used chrome.identity.launchWebAuthFlow() with Google's logout URL rather than it's oauth URL

chrome.identity.launchWebAuthFlow(
    { 'url': 'https://accounts.google.com/logout' },
    function(tokenUrl) {
        responseCallback();
    }
);

This worked pretty well.

Answer 6

I've found that calling these two in the sequence is working:

var url = 'https://accounts.google.com/o/oauth2/revoke?token=' + token;
window.fetch(url);

chrome.identity.removeCachedAuthToken({token: token}, function (){
  alert('removed');
});