• Resolved lukefive

    (@lukefive)


    We administer a number of WordPress sites; all use your plugin and validate through Google Gmail. Today Google has contacted me saying “you’re listed as a contact on the following Google Cloud Project(s) using OAuth 2.0 to access Google APIs” etc.

    They are telling me to take action or else. They go on to describe extensive policies, using jargon and numerous links. A forest of information.

    Is there known best practice on how to respond to this Google demand?

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Author Slava Abakumov

    (@slaffik)

    Hi,

    As you’ve not provided the email that Google sent you – I have no idea what you are talking about and can’t suggest you anything other than read carefully what they wrote to you.

    Thread Starter lukefive

    (@lukefive)

    @slaffik That’s interesting, because the email looked like a mass mailing. Apparently not.

    I have followed their links and read the documentation. There are a variety of ‘submit’ options. I want to identify the one that directly applies to how we use the API.

    Using educated guesswork, I submitted my existing setup for Google’s approval. It seems that I am a test case for this item, yes?

    Plugin Author Slava Abakumov

    (@slaffik)

    I still have no idea what you are talking about and can’t answer your question.

    Thread Starter lukefive

    (@lukefive)

    @slaffik My post was not intended to disrespect you. Since this forum is public, I thought you or someone else might have also seen this type of message from Google. I will continue to work with Google on this.

    Mohamed Farag

    (@mohamedesmatfarag)

    Hi,
    The author might be asking about this one I got too:
    —————-
    Subject:
    [Action Required] Submit your app(s) for Restricted Scopes OAuth verification
    From:
    Google Apps Developers<[email protected]>
    Wed, Jan 16, 2019 at 11:16 AM
    To: [My_Work_email]@gmail.com

    Hi Google API Developer,

    We sent this email because you’re listed as a contact on the following Google Cloud Project(s) using OAuth 2.0 to access Google APIs:
    genuine-eon-220515

    In October 2018, we announced that, in January 2019, new Gmail API policies for restricted scopes will go into effect. We want to let you know that, starting today, you can submit your app(s) that use restricted scopes for verification. Please review the full policy and OAuth FAQ for more information including the secure handling requirement.
    What you need to do

    If you want to use one of the restricted scopes, for verification through the Google API Console (On the left side menu click Credentials, then click OAuth consent screen) between January 16th and February 15th, 2019 for the project(s) listed above. Owners and editors of the project will be able to submit for verification and developers with internal apps for users in the same G Suite domain do not need to do this.
    If you do not take action

    If you do not submit for verification by February 15th, 2019, we’ll disable account access for new users on February 22nd, 2019.

    If you do not submit for verification by March 31st, 2019, we’ll revoke existing consumer grants.

    Thanks,
    Google Cloud Platform/API Trust & Safety
    —————-

    On the Credentials-> OAuth consent screen tab:
    https://console.developers.google.com/apis/credentials/consent?project=long-setting-226002
    there are those fields like:
    Authorized domains
    Application Homepage link
    Application Privacy Policy link
    Application Terms of Service link (Optional)

    Do you think we need to do anything other than submitting this info?

    Thank you

    Plugin Author Slava Abakumov

    (@slaffik)

    @mohamedesmatfarag
    Thank you for the email text! I’ve not received it yet.

    @mohamedesmatfarag @lukefive

    Here is what you need to do: https://cloud.supportally.com/8a1aa0559a67
    After that, you won’t need to send the app/project to verification and it will continue to work as it used to be.

    Plugin Author Slava Abakumov

    (@slaffik)

    Thread Starter lukefive

    (@lukefive)

    @slaffik Thank you for the additional work done on this. When I follow the link back to the Google API page, the two “Application Type” radio buttons (one marked Internal) are not available. However, I recently submitted my setup to Google for verification, and there are now several indicators that verification is pending.

    I may not have posted enough of the original Google message to be of full use to you Slava. In my environment, the policy about releasing information is strict. So I’m just waiting to hear from Google.

    Thread Starter lukefive

    (@lukefive)

    Since I started this thread, here is the final word received today from Google:

    It appears your app is a Gmail SMTP plug-in for WordPress AND you or the site admin are the only users of the app. If that is the case, you do NOT need to go through the verification process. We recommend that you continue to use your app with the “unverified app” screen intact as your use of the Gmail API is not for public.

    Google Cloud Platform/API Trust & Safety

    For me this is now resolved.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Message from Google about using their API’ is closed to new replies.