Google will delete OAuth clients falsely flagged as unused

8 points by panstromek 3 days ago

Any Google Sign In user here bumped into this? Google sent out an email with this message yesterday:

The following OAuth clients that you manage have been inactive for at least five months. They will be deleted unless you take action:

...list of client ids...

-----

Now, all of those client ids are used in production, so this seems like a false positive. There seems to be no way to prevent this except "using them" but we already use them so it seems like we're out of luck? But we are not the only one, I've found some similar posts on reddit.

I couldn't find a way to report this either, Google Cloud support is a maze and I either don't have some permissions for it or it redirects me to some support page or AI chatbot.

romanhn 3 days ago

User of Firebase Auth here - got the same message and was similarly confused. Good to know I'm not the only one, but hope this gets resolved somehow. When Google was bragging about 30% of their code being AI-generated, the client ID gathering must've been part of that...

  • panstromek 2 days ago

    I sure hope that private keys are not AI generated, too

mvpreneur 2 days ago

Same here.. 1 Production apps, sign-ins occurring frequently. They only freaked out every Dev in the world..

matt413 3 days ago

Same here. Received it for 3 production apps with regular traffic going through Oauth. No idea how to "use them" while they're already in use.