OAuth2 - How to stay signed in from multiple browsers at the same time?

Question

I'm working with a project in Odoo and I have enabled google Sign in. The problem is, when a user tries to log in from different browsers at the same time, only the latest log in session is retained and the older ones are expiring.

For example - I sign in to Odoo using google on chrome and then sign in on Mozilla firefox. At this point if I refresh my page on chrome where I signed in, I will be logged out and will be asked to sign in again but I'm still signed in on firefox.

After a lot of considerations, it came to my mind that probably the old refresh tokens are expiring. However on the official docs, I saw this:

A token might stop working for one of these reasons:

• The user has revoked access.
• The token has not been used for six months.
• The user account has exceeded a certain number of token requests.

If this is not the case then why can't I stay signed in from multiple browsers at the same time? What should I do in order to stay signed in using google from multiple browsers?

Any help would be appreciated!

Answer 1

I don't know much about Odoo but most likely this is due to the policy of odoo that they support login session for an account only from one place (and expire older sessions). I'm sure the same applies to when you sign-in with a password that you will only have one session.

When you use login with Google (or other methods), most of the applications issue their own credentials (cookies etc) and they decide the lifetime of a session (most don't tie these to Google session). I suspect that is what you are experiencing here.

The previous tokens don't become invalid for the same app when a new token is issued (up to a limit roughly 25).