google-oauth - 对于给定的客户端/用户组合，Google API 会发出多少个刷新 token ？

Question

我正在将已安装的应用程序迁移到 OAuth2，并遇到了这个 paragraph :

Note that there are limits on the number of refresh tokens that will be issued; one limit per client/user combination, and another per user across all clients. You should save refresh tokens in long-term storage and continue to use them as long as they remain valid. If your application requests too many refresh tokens, it may run into these limits, in which case older refresh tokens will stop working.

按照建议，该应用程序正在存储刷新 token ，但用户可以通过在多个设备上使用它来请求多个刷新 token 。我想知道:

• 客户端/用户组合限制是多少？

• 如果用户超过“跨所有客户端”限制，哪个 client_id 刷新 token 会被撤销？

• 给定的刷新 token 将永远过期，除非用户超出这些限制或撤销它？

预先感谢您的帮助。

Answer 1

官方限制为 25。

https://developers.google.com/accounts/docs/OAuth2#expiration

There is currently a 25-token limit per Google user account. 
If a user account has 25 valid tokens, the next authentication request succeeds, 
but quietly invalidates the oldest outstanding token 
without any user-visible warning.