Hacker News Reader

and then have to reauthenticate it every 2 weeks because the refresh token seemingly expires for no reason...

If you set your app to "production", the refresh token works properly. Ignore the verification steps. It'll yell at you, but it'll work.

How can you set an app to production without Google verification if you're not in a workspace. I'm guessing the answer is that there is no way.

The refresh token shouldn't expire.

Maybe not for Google, but it's not part of the OAuth spec. It's perfectly valid for refresh tokens to expire.

Interesting. Many of the OAuth services I've used use non-expiring refresh tokens. Though I definitely agree; they should also have an expiry.