Server side removal of Oauth token

Question

If a user wants to remove him/herself from our service, we delete all of their data from our database, including Oauth tokens. The Oauth tokens we have are secure and persi

Answer 1

Yes, you can revoke tokens programmatically as if the user revoked access in their accounts settings page.

For AuthSub and OAuth 1.0, use the AuthSubRevoke token endpoint by making an OAuth-signed request to:

https://www.google.com/accounts/AuthSubRevokeToken

For OAuth 2.0, use the revocation endpoint like:

https://accounts.google.com/o/oauth2/revoke?token={refresh_token}