fix: ensure we always get a refresh token after the auth prompt (#72)

* fix: ensure we always get a refresh token after the auth prompt

* fix lint

Author: tswast

pydata_google_auth/_webserver.py

@@ -64,7 +64,7 @@ def find_open_port(start=8080, stop=None):
     return None
 
 
-def run_local_server(app_flow):
+def run_local_server(app_flow, **kwargs):
     """Run local webserver installed app flow on some open port.
 
     Parameters
@@ -86,4 +86,4 @@ def run_local_server(app_flow):
     port = find_open_port()
     if not port:
         raise exceptions.PyDataConnectionError("Could not find open port.")
-    return app_flow.run_local_server(host=LOCALHOST, port=port)
+    return app_flow.run_local_server(host=LOCALHOST, port=port, **kwargs)

pydata_google_auth/auth.py

@@ -31,6 +31,13 @@
 GOOGLE_AUTH_URI = "https://accounts.google.com/o/oauth2/auth"
 GOOGLE_TOKEN_URI = "https://oauth2.googleapis.com/token"
 
+AUTH_URI_KWARGS = {
+    # Ensure that we get a refresh token by telling Google we want to assume
+    # this is first time we're authorizing this app. See:
+    # https://github.com/googleapis/google-api-python-client/issues/213#issuecomment-205886341
+    "prompt": "consent",
+}
+
 
 def _run_webapp(flow, redirect_uri=None, **kwargs):
 
@@ -352,9 +359,11 @@ def get_user_credentials(
 
         try:
             if use_local_webserver:
-                credentials = _webserver.run_local_server(app_flow)
+                credentials = _webserver.run_local_server(app_flow, **AUTH_URI_KWARGS)
             else:
-                credentials = _run_webapp(app_flow, redirect_uri=redirect_uri)
+                credentials = _run_webapp(
+                    app_flow, redirect_uri=redirect_uri, **AUTH_URI_KWARGS
+                )
 
         except oauthlib.oauth2.rfc6749.errors.OAuth2Error as exc:
             raise exceptions.PyDataCredentialsError(