I've clicked the "move to production" button again...

# confetti

[mbonnin]

I've clicked the "move to production" button again in the Oauth screen 🤞

[mbonnin]

This is how it looks like in the Android Makers app.

[mbonnin]

The weird thing is that the name is good in the app despite being project-127852231544 in the oauth screen

[mbonnin]

Ah wait, this first popup has nothing to do with Oauth

[mbonnin]

It's using the app icon + name

[mbonnin]

Dumping screenshots here as a future reference to myself. This is the oauth screen for Android makers (with the weird project name)

[mbonnin]

A single (Firebase) google-service.json contains several OAuth clients (as seen in GCP):

"oauth_client": [
        {
          "client_id": "<http://127852231544-bmorteqbdjjjffq7uirf6i8db0t4bo71.apps.googleusercontent.com|127852231544-bmorteqbdjjjffq7uirf6i8db0t4bo71.apps.googleusercontent.com>",
          "client_type": 1,
          "android_info": {
            "package_name": "fr.paug.androidmakers",
            "certificate_hash": "a1eb323c4b06a569e8db487bb03a65d2ea649f48"
          }
        },
        {
          "client_id": "<http://127852231544-nislnj6eo41sbj5f9mmbeedcqdrk1pib.apps.googleusercontent.com|127852231544-nislnj6eo41sbj5f9mmbeedcqdrk1pib.apps.googleusercontent.com>",
          "client_type": 1,
          "android_info": {
            "package_name": "fr.paug.androidmakers",
            "certificate_hash": "ff357f347e107c052e57095034000d9a312275a5"
          }
        },
        {
          "client_id": "<http://127852231544-1nj0bjn8v2h7psd1lnf8ppovoe3k245b.apps.googleusercontent.com|127852231544-1nj0bjn8v2h7psd1lnf8ppovoe3k245b.apps.googleusercontent.com>",
          "client_type": 3
        }
      ],

The last one here client_type: 3 is what we get in R.string._default_web_client_id_ and which is used to request a tokenId that we can then decode on the backend.

[mbonnin]

So that clears it up for Android Makers. I think the main difference is that the Android Makers did not change the logo and/or app name. That might have triggered the verification process...

[mbonnin]

Seems to be working good with Confetti for me at the moment 🤞

[mbonnin]

From my Google account (https://myaccount.google.com/permissions):

[mbonnin]

I'm guessing once Confetti verified, we'll get the nice icon in there

[mbonnin]

Android makers scopes

[mbonnin]

doesn't request any specific scopes even though the oauth screen above mentions public info

[mbonnin]

Also I thought Firebase would require email to enable that option. It is enabled in Android Makers but I guess it's not working there

[mbonnin]

For some reason, I can't get the same oauth screen as Android Makers from Confetti (despite asking for more permissions)

[John O'Reilly]

there's definitely the making of a blog article here 😃