google-ads-php SDK and OAuth OOB deprecation

[funny_ha_ha]

Hello,

I'm using https://github.com/googleads/google-ads-php version 15.0 (most recent version as of time of writing) and recently got an email from google with the information that OAuth out-of-band (OOB) flow will be deprecated and "Our records indicate you have OAuth clients that used the OAuth OOB flow in the past.".

I am unsure if I need to so something ...

The OAuth 2.0-Client-ID I have in my Google Cloud Platform Console is of type "Desktop".

I basically use the SDKs example script (https://github.com/googleads/google-ads-php/blob/main/examples/Authentication/GenerateUserCredentials.php) to get a refreshToken ONCE on my workstation, put this token inside the google_ads_php.ini on my server and use it to access the API via my serverside application.

Do I need to do a thing now, or am I good? The information in the email and in the blog post does not make it clear, neither does the README of the PHP SDK.

Best

Marco

[Guillaume Thomas]

Hello,

I've received the same email, and I was asking myslef the same questions.

If you find more informations, let me know.

[Google Ads API Forum Advisor]

Hello Guillaume,

Thanks for reaching out to the Google Ads API support. Yes, still you need to do that same process. Please verify all the steps used to obtain credentials for the Google Ads API once by following the link.
Feel free to reply back if you have any follow up questions.

Best regards,

Jakeia Sabrina Google Ads API Team

 

ref:_00D1U1174p._5004Q2aQNr2:ref

[Guillaume Thomas]

Hello adsapi,

I think you didn't understand our question ...

[Matteo Medda]

Hello,
we also received the same email, but honestly we don't understand what we have to do ... we also use sdk-php and a "desktop" type oauth2.

Should we switch to a "service" type oauth2? or what do we have to do "concretely" to migrate that oauth2 desktop?

Regards,

Matteo

[Matteo Medda]

Hello,
we are using php-sdk v15 (https://github.com/googleads/google-ads-php/releases/tag/v15.0.0) and we are retrying the "GenerateUserCredentials" script

We tried to create new credentials on the google cloud console, and set them at the GenerateUserCredentials prompt, but when we are redirected to the web interface, the "old" clientID appears selected and there is no way to change (even if in query string the clientID set is "the new one").

This situation is very strange, it seems like a bug to us.

Is it better to create a new project id and a new client id? We don't want to have problems with the credentials we already use in production.

Regards,

Matteo

[Google Ads API Forum Advisor]

Hi everyone,

Thank you for raising this concern. 

Allow me to reach out to the rest of our API support team to clarify this communication and discuss what steps to take to avoid issues. We'll reach back to you once we have more details.

Best regards,

Peter Laurence Google Ads API Team

ref:_00D1U1174p._5004Q2aQNr2:ref

[Matteo Medda]

Hi Peter,
thank you very much, we look forward to receiving your feedback.

Regards,

Matteo

[Google Ads API Forum Advisor]

Hi everyone,

As per feedback received from our team, you can refer to the https://developers.googleblog.com/2022/02/making-oauth-flows-safer.html for details.

We have also updated the PHP guide here: https://developers.google.com/google-ads/api/docs/client-libs/php/oauth-web. As long as customers use the new GenerateCredentials example for generating new refresh tokens, all should be good.

I hope this helps.

[Matteo Medda]

Thank you for the information. 

Matteo

Matteo Medda EN - Tech Lead shopfully.com Follow us on LinkedIn

Notice. The information contained in this message is intended only for use of the individuals named above. The message may contain confidential, proprietary or legally privileged information. If you are not the intended recipient of this message, you must not use, disseminate or copy it in any form or take any action in reliance of it. If you have received this message in error, please delete it and notify the sender immediately. This e-mail address is not a private address and, therefore, its use is regulated.

[Google Ads API Forum Advisor]

Hi Mateo,

Should you have additional clarifications with the APIs, please write back by opening new post for seperate issue and we'll be happy to assist you.

Thanks,

Yasar Google Ads API Team

ref:_00D1U1174p._5004Q2aQNr2:ref