Fix Google invalid_grant and 7-day token expiry in Duaer

Why Duaer shows invalid_grant

The error is usually invalid_grant or Token has been expired or revoked. Duaer tried to swap its refresh token for a new one and Google refused. Common causes:

• The OAuth app in Google Cloud has publishing status Testing, so refresh tokens for external users expire after 7 days. This is the most common cause.
• The Google account changed its password, or removed the app on its security page.
• The same account authorized the same client too many times, and the oldest token was revoked.

Fix it in Duaer

1. Open Google Cloud console and select the project your Duaer credential uses.
2. Open Audience under Google Auth Platform (OAuth consent screen in the older console) and select Publish app so the status reads In production.
3. Back in Duaer, open the credential, select Sign in with Google, and save.
4. Run the affected digital organizations with Execute step, then publish them again.

After publishing, Google may show an unverified app notice. You can continue for yourself and your team; offering restricted scopes such as Gmail to many outside users needs Google app verification. Full setup: Google OAuth credentials in Duaer.