Does Google Provide APIs for OAuth Allowlisting?
Google provides the Directory API's token endpoint to customers; however, it appears to allow customers to revoke access tokens for applications after they are already installed.
I've created a feature request that goes into more detail; however, in the meantime - I would like to start discussion in this forum as well to facilitate discussion and learn how other companies have solved this use case within this community.