[Reminder] Migrate your OAuth out-of-band flow to an alternative method before Jan. 31, 2023

9 views
Skip to first unread message

Google Developers

unread,
Jan 18, 2023, 8:14:46 PM1/18/23
to page...@googlegroups.com
Google Developers logo
OAuth out-of-band flow will be blocked for your production OAuth clients.
Our records indicate your organization has requested an extension for the OAuth OOB flow deprecation.

Hello Google OAuth Developer,

We're writing to remind you that the OAuth out-of-band (OOB) flow will be deprecated for your client(s) on January 31, 2023, to protect your users from phishing and app impersonation attacks.

What do I need to know?

As we notified you in May, August, and September 2022, any affected authorization endpoint requests by client(s) that were granted one-time extensions will be blocked with an invalid_request error after January 31, 2023.

If you have already migrated your app(s) to an alternative OAuth method, no further action is required. Please note that if your app(s) is natively installed your users may have to update the app to the newer version to stop using the OOB method. Users can learn about this from the help center article, linked from the user-facing warning message and the error message.

Below are key dates for compliance:

  • September 5, 2022: A user-facing warning message was displayed to non-compliant OAuth requests.
  • October 3, 2022: The OOB flow was blocked for all clients (excluding clients with extension grant).
  • January 31, 2023: The OOB flow will be blocked for all clients (including clients with extension grant).

Please refer to our previous email with the subject line containing: “Migrate your OAuth out-of-band flow to an alternative method before October 3, 2022,” for more details.

What do I need to do?

The following OAuth client(s) will be blocked from using the OOB flow.

OAuth client list:

Thanks for choosing Google OAuth.

— The Google OAuth Developer Team

© 2023 Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043

You have received this mandatory service announcement to update you about important changes to Google services you use.

Reply all
Reply to author
Forward
0 new messages