I’m trying to use the Google Vision API and finding the OAuth setup to be really confusing.

This is for a desktop app that I’m creating for my own use. It won’t be deployed.

I’d like to minimize the number of web browser authentications, or even avoid them if possible.

I’ve created a Google service account for this, but it seems these do not issue refresh tokens.

Google’s own documentation is really confusing, as there seem to be a bunch of other factors in addition to OAuth.

Is there a better way to approach this? Should I not use a service account? Any suggestions?

I have it sort of working, but am constantly asked to authenticate. Google keeps sending me “Security alert” emails that access was granted. I don’t seem to be getting a refresh token.