image

I would think the answer is “NO!!” and it seems google agrees. “Installed apps are distributed to individual devices, and it is assumed that these apps cannot keep secrets” from from google’s docs. Unfortunately, they still require the client token to do anything with. Is the assumption that even if they are exposed it will not be an issue?

I would like to provide a ‘7 day trial’ period for a web app. Google OAuth is set up as the sole Login method to the web app. I’m wondering how I can use Google OAuth to grant access and proceed to the web app and deny access after a certain time interval (e.g. 7 days after first sign in)?

When brand new users are coming to my website, they are redirected to google auth page then I use the code to send it to the server.

Imagine I’ve created a website that provides two OAuth options: Google and Telegram.