OAuth - restricted or sensitive confusion

[Fergus Howe]

Hi there,

My app currently uses the https://www.googleapis.com/auth/fitness.activity.read scope which is set to be categorised as "restricted" this spring. I've also read that you can find out which scopes are restricted and sensitive using the Google Cloud console's Oauth consent screen page. There the same scope is marked as "sensitive", not restricted.

Can anyone explain the discrepancy? And what will happen if I apply for verification for a sensitive scope which is soon to become restricted? Many thanks

[goya]

“Fitnes.activity.read” will start being restricted this spring, that is why you still see it as “sensitive” instead of “restricted”. 

To continue using this scope, please check this link [1] and after following the specified steps you will be contacted by the Trust and Safety team for more information on the process. 

[1]: https://developers.google.com/fit/improvements#when_to_apply_for_verification 

[Fergus Howe]

Thanks goya for the clarification, it was very helpful!

Fergus