blocks|key|237156|text|这也一直困扰着我，直到我意识到我被登录和授权、注销和撤销访问之间的区别搞混了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|237157|首先，让我们不要被按钮的名字所困扰。Yo可能叫它退出，但是你真正想要实现的是允许用户撤销对他们的Google帐户的访问，然后登录并授予对另一个帐户的访问权。|offset|length|style|BOLD|237158|如果您使用removeCacheAuthToken，然后再次授权，没有看到弹出，这意味着扩展仍然可以访问某些API。要查看哪些应用程序获得了哪些谷歌服务的访问权限，请访问权限设置并查看。|CODE|237159|有几种方法可以撤销访问：|237160|转到chrome://identity-internals/并删除所需的令牌。然后单击“授权”按钮，您将看到一个弹出式窗口，以选择要授予访问权限的Google帐户。|ordered-list-item|237161|当然，这种方法只适用于测试。如果您的最终用户访问该页面，他们将不会看到您的扩展的访问令牌。|237162|当用户单击Revoke+access按钮或您调用的任何名称时，将显示一个弹出窗口，该弹出命令他们转到权限设置页面手动撤销访问。|237163|在当前网页上创建表单，将访问令牌添加到窗体并提交到https://oauth2.googleapis.com/revoke端点。|237164|根据我的经验，方法3似乎是一个理想的解决方案，但它是一个成功和混合对我。有时我会得到一个无效的或过期的令牌错误，并且排除它是不值得的。我会坚持心境平和的方法。|237165|entityMap|0|LINK|mutability|MUTABLE|url|https://myaccount.google.com/permissions|1^0|0|O|2|0|5|K|2D|4|0|0|0|2|S|0|0|5|D|1E|6|1|0|P|10|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@$D|18|E|19|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|1A|8|@$D|1B|E|1C|F|J]]|9|@$D|1D|E|1E|1|1F]]|A|$]]|$1|K|3|L|5|6|7|1G|8|@]|9|@]|A|$]]|$1|M|3|N|5|O|7|1H|8|@$D|1I|E|1J|F|J]]|9|@]|A|$]]|$1|P|3|Q|5|6|7|1K|8|@]|9|@]|A|$]]|$1|R|3|S|5|O|7|1L|8|@$D|1M|E|1N|F|G]]|9|@$D|1O|E|1P|1|1Q]]|A|$]]|$1|T|3|U|5|O|7|1R|8|@$D|1S|E|1T|F|J]]|9|@]|A|$]]|$1|V|3|W|5|6|7|1U|8|@]|9|@]|A|$]]|$1|X|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]]|Y|$Z|$5|10|11|12|A|$13|14]]|15|$5|10|11|12|A|$13|14]]]]

This has been bugging me too, until I realized that I got mixed up by the difference between sign-in and authorization, sign-out and revoking access.
First, let's not get caught up in the name of the button. Yo may call it Sign Out, but what you actually want to achieve is to let users revoke access for their Google Account, and then log in and grant access to a different account.
If you use <code>removeCacheAuthToken</code>, then authorize again, and see no popup, then that means the extension still has access to certain APIs. To check which apps have been granted access to which Google services, go to <a href="https://myaccount.google.com/permissions" rel="nofollow noreferrer">permission settings</a> and have a look.
There are several ways to revoke access:
<ol>
<li>Go to <code>chrome://identity-internals/</code> and remove the tokens that you want. Then click on the Authorize button, and you should see a popup to choose the Google accounts to grant access.</li>
</ol>
Of course, that method is for testing only. Your end users won't see the access token for your extension if they visit that page.
<ol start="2">
<li>When the user clicks on the Revoke access button, or whatever name you call, display a popup that tells them to go to the <a href="https://myaccount.google.com/permissions" rel="nofollow noreferrer">permission settings page</a> to manually revoke access.
</li>
<li>Create a form on the current web page, add access token to the form and submits to the <code>https://oauth2.googleapis.com/revoke</code> endpoint.
</li>
</ol>
From my experience, method 3 seems like an ideal solution, but it was a hit and mix for me. Sometimes I would get an invalid or expired token error, and troubleshooting it is not worth it. I would stick with method for peace of mind.

blocks|key|941670|text|正如在这个答案中提到的，您可以使用https://accounts.google.com/o/oauth2/revoke?token="+%2B+current_token)来允许用户撤销对api的访问。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|941671|以下是相同的功能：|941672|function+revokeToken()+{
++++user_info_div.innerHTML+=+"";
++++chrome.identity.getAuthToken({+interactive:+false+},+
++++++function+(current_token)+{
++++++++if+(!chrome.runtime.lastError)+{
++++++++++//+@corecode_begin+removeAndRevokeAuthToken
++++++++++//+@corecode_begin+removeCachedAuthToken
++++++++++//+Remove+the+local+cached+token
++++++++++chrome.identity.removeCachedAuthToken({token:+current_token},+function(){});
++++++++++//+@corecode_end+removeCachedAuthToken

++++++++++//+Make+a+request+to+revoke+token+in+the+server
++++++++++var+xhr+=+new+XMLHttpRequest();
++++++++++xhr.open(
++++++++++"GET",+
++++++++++"https://accounts.google.com/o/oauth2/revoke?token="+%2B+current_token);
++++++++++++
++++++++++xhr.send();
++++++++++//+@corecode_end+removeAndRevokeAuthToken

++++++++++//+Update+the+user+interface+accordingly
++++++++++changeState(STATE_START);
++++++++++sampleSupport.log("Token+revoked+and+removed+from+cache.+"+%2B+
++++++++++++"Check+chrome://identity-internals+to+confirm.");
++++++++}
++++});
}|code-block|syntax|javascript|941673|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/21626506/6908282^0|H|1W|3|4|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|G|5|6|7|10|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|11|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|12|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

As mentioned in <a href="https://stackoverflow.com/a/21626506/6908282">this answer</a>, you can use <code>https://accounts.google.com/o/oauth2/revoke?token=&quot; + current_token)</code> to allow the user to revoke access to the api.
Below is the function for the same:
<pre class="lang-js prettyprint-override"><code>function revokeToken() {
 user_info_div.innerHTML = &quot;&quot;;
 chrome.identity.getAuthToken({ interactive: false }, 
 function (current_token) {
 if (!chrome.runtime.lastError) {
 // @corecode_begin removeAndRevokeAuthToken
 // @corecode_begin removeCachedAuthToken
 // Remove the local cached token
 chrome.identity.removeCachedAuthToken({token: current_token}, function(){});
 // @corecode_end removeCachedAuthToken

 // Make a request to revoke token in the server
 var xhr = new XMLHttpRequest();
 xhr.open(
 &quot;GET&quot;, 
 &quot;https://accounts.google.com/o/oauth2/revoke?token=&quot; + current_token);
 
 xhr.send();
 // @corecode_end removeAndRevokeAuthToken

 // Update the user interface accordingly
 changeState(STATE_START);
 sampleSupport.log(&quot;Token revoked and removed from cache. &quot; + 
 &quot;Check chrome://identity-internals to confirm.&quot;);
 }
 });
}
</code></pre>

I would like to add a Sign In with Google and a Sign Out button to my Chrome extension.
<img src="https://i.stack.imgur.com/mJIcB.png" alt="" />
One technique that uses chrome.identity.getAuthToken for Sign In is described in <a href="https://developer.chrome.com/extensions/tut_oauth" rel="nofollow noreferrer">this tutorial</a>. It works great! When the button is clicked, it shows a popup for authentication and authorization.
But how should I implement the Sign Out button?
I tried to use the removeCachedAuthToken method in the on-click handler of my Sign Out button. With this, the sign-in functionality doesn't work as expected. After, when I pressed the Sign In button again, I got a new token directly without a popup asking the user to authenticate and authorize my extension. I would like users to be able to change their account by signing out. With this technique, that's not possible. How should I implement the sign out functionality to allow for this?

How to revoke Identity API Token ( Chrome Extension )

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我想在Google中添加一个登录，并在我的Chrome扩展中添加一个注销按钮。​​使用chrome.identity.getAuthToken在中使用符号的一种技术是用描述的。效果很好！单击该按钮时，它将显示一个用于身份验证和授权的弹出。但是我应该如何实现注销按钮呢？我尝试在我的removeCachedAuthToke...

问如何撤销标识API令牌( Chrome扩展)
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何撤销标识API令牌( Chrome扩展)EN