Intermittent OAuth Token Revocation Issues with Google Workspace Service Accounts

[pixelsorcerer]

We're experiencing intermittent OAuth token revocation issues with our Google Workspace service accounts, which are integrated with an external fax SaaS tool: Talkdesk. The revocation events occur without a discernible pattern and require reauthentication, disrupting our services. 

In the security: investigation tool I created a search for: application name: talkdesk, event is: revoke and found the events in question. However, the search results just show me the events in question but not really any identifying information that helps me discover the root cause. I am not sure what to do with this data or where to look/ troubleshoot next. 

Thanks in advance for any tips you can provide!

[rengawluap]

We had something similar appearing in out OAuth logs and tracked it down to the refresh token not being used for 6 months and the revoke event occurring.

See:  https://developers.google.com/identity/protocols/oauth2#expiration