Skip to content

fix(oauth): restrict new unverified Google grants - #9782

Draft
waleedlatif1 wants to merge 1 commit into
stagingfrom
codex/google-oauth-new-grants-review-nov7
Draft

waleedlatif1 wants to merge 1 commit into
stagingfrom
codex/google-oauth-new-grants-review-nov7

Conversation

@waleedlatif1

Copy link
Copy Markdown
Collaborator

Summary

  • Apply the hosted Google verification flag when starting or completing new Ads, Meet and Chat grants. Cover both account linking and managed enrollment.
  • Reject pending scopes supplied through other Google clients, including Vertex AI. Constrain each review integration to its declared scopes and disable incremental scope accumulation.
  • Keep the existing Google client configuration for every environment. Previously issued credentials continue refreshing with their original client. A reconnect that requests a new grant goes through the verification check.

Type of change

  • Bug fix

Testing

  • Ran 26 HTTP and managed-enrollment integration cases against disposable PostgreSQL and Redis, plus 20 Google Chat connector cases. Verified token refresh using the existing client with the grant flag off.
  • Ran 79 focused unit cases, including Google service-account transport and managed OAuth.
  • Ran app type checking, repository lint and the test-pattern audit.

Rollout

The hosted flag is off when absent. Enable it on the staging deployment used for review. A separate Google project and reviewer-only deployment can supply its own Google client without replacing the shared staging or production credentials. Google review and production release are separate follow-ups.

@vercel

vercel Bot commented Nov 7, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment
Project Deployment Actions Updated
docs Skipped Skipped Nov 7, 2026 9:11pm UTC

Request Review

This branch was previously deployed

1 inactive deployment
Preview — 21169094 Deployed Nov 7, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant