How to get Google to automatically register a user in PassportJS?

Question

I allow users to register only with a specific domain name. This specific functionality works and is not the root of the problem. The problem is that users get stuck in a feedback loop when they try to log in with the wrong email address.

Referring to the above image, the user (on an empty page incognito without information) begins with the first step. Clicking on the username leads them to step 2, and then to step 3. Attempting to log in with an email address ending in the wrong domain leads them to step 4. This is necessary.

After the fourth step, if they exit the website, they are presented in the first step. This is desirable. The code to exit the system is as follows.

app.get("/logout", function(req, res) {
    req.logout()
    req.session.destroy()
    res.clearCookie("connect.sid")
    res.redirect("/")
})

What happens after they login again that is undesirable. Instead of returning them to step 2 (it is advisable that they can log in again with their CORRECT email address), he brings them directly to the fourth step. . It’s as if Google remembers who last logged in.

Here is the code for my passport.js configuration file .

Short question . How can I signal Google not to do this? Or launch a browser so that they are logged in again? I'm at a loss.

: Oauth2.0 Documentation Google hd , . , PassportJS.

Answer 1

, . , . , , , .

---

prompt=select_account .

app.get(
    "/auth/google",
    passport.authenticate(
        "google",
        {
            scope : ["profile", "email"],
            prompt : "select_account" // Added here
        }
    )
)

, , . .

: https://accounts.google.com/o/oauth2/auth?redirect_uri=https%3A%2F%2Fdevelopers.google.com%2Foauthplayground&response_type=code&client_id=407408718192.apps.googleusercontent.com&scope=profile+email&access_type=offline&prompt=select_account

---

, Google Apps for Work, hd . hd.

Answer 2

revoke , . OAuth.

( request):

request.get('https://accounts.google.com/o/oauth2/revoke', {
  qs:{token:'[ACCESS or REFRESH TOKEN]'}
}, function (err, res, body) {

})

.

@William Denniss , , .