From 13fe965d226f7c9879de908b883c70d6466536a8 Mon Sep 17 00:00:00 2001 From: Tofik Hasanov Date: Tue, 16 Jun 2026 12:26:46 -0400 Subject: [PATCH] fix(integration-platform): force Google account chooser on connect/reconnect MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Google Workspace and GCP OAuth flows sent prompt=consent, which forces the consent screen but not the account chooser. Google then silently reuses the browser's signed-in Google account, so a customer who connected with the wrong account (e.g. a non-admin user — Workspace requires an admin) can't switch accounts on reconnect; re-auth keeps binding the same wrong account. Add select_account to the prompt (select_account consent) so the account chooser always appears. consent is retained so a refresh token is still issued; this only affects the interactive authorize step, not token refresh, and does not touch already-connected customers. Co-Authored-By: Claude Opus 4.8 (1M context) --- packages/integration-platform/src/manifests/gcp/index.ts | 5 ++++- .../src/manifests/google-workspace/index.ts | 5 ++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/packages/integration-platform/src/manifests/gcp/index.ts b/packages/integration-platform/src/manifests/gcp/index.ts index cf594e17d7..0d3441e340 100644 --- a/packages/integration-platform/src/manifests/gcp/index.ts +++ b/packages/integration-platform/src/manifests/gcp/index.ts @@ -34,7 +34,10 @@ export const gcpManifest: IntegrationManifest = { supportsRefreshToken: true, authorizationParams: { access_type: 'offline', - prompt: 'consent', + // select_account forces Google's account chooser so a user can switch + // from a wrong account when connecting/reconnecting; consent keeps the + // consent screen so a refresh token is always issued. + prompt: 'select_account consent', }, setupInstructions: `## Platform Admin: Enable GCP OAuth diff --git a/packages/integration-platform/src/manifests/google-workspace/index.ts b/packages/integration-platform/src/manifests/google-workspace/index.ts index 0adbc65059..88b4d5678a 100644 --- a/packages/integration-platform/src/manifests/google-workspace/index.ts +++ b/packages/integration-platform/src/manifests/google-workspace/index.ts @@ -31,7 +31,10 @@ export const googleWorkspaceManifest: IntegrationManifest = { supportsRefreshToken: true, authorizationParams: { access_type: 'offline', - prompt: 'consent', + // select_account forces Google's account chooser so an admin can switch + // from a wrong (e.g. non-admin) account when connecting/reconnecting; + // consent keeps the consent screen so a refresh token is always issued. + prompt: 'select_account consent', }, setupInstructions: `To enable Google Workspace Admin SDK: 1. Go to Google Cloud Console (console.cloud.google.com)