from Hacker News

Google will delete OAuth clients falsely flagged as unused

by panstromek on 5/29/25, 11:21 AM with 8 comments

Any Google Sign In user here bumped into this? Google sent out an email with this message yesterday:

The following OAuth clients that you manage have been inactive for at least five months. They will be deleted unless you take action:

...list of client ids...

-----

Now, all of those client ids are used in production, so this seems like a false positive. There seems to be no way to prevent this except "using them" but we already use them so it seems like we're out of luck? But we are not the only one, I've found some similar posts on reddit.

I couldn't find a way to report this either, Google Cloud support is a maze and I either don't have some permissions for it or it redirects me to some support page or AI chatbot.

  • by romanhn on 5/29/25, 2:24 PM

    User of Firebase Auth here - got the same message and was similarly confused. Good to know I'm not the only one, but hope this gets resolved somehow. When Google was bragging about 30% of their code being AI-generated, the client ID gathering must've been part of that...

  • by lomoeffect on 5/29/25, 11:47 AM

    Also got this message for a client ID that's definitely being used in prod. Are you able to link the Reddit thread?

    Google Cloud support is an actual joke. I have no idea how to navigate their chatbot and speak to an actual human. Awful.

  • by panstromek on 5/30/25, 4:25 AM

    We got and update from somebody at firebase on reddit and they confirmed it was marked incorrectly: https://www.reddit.com/r/Firebase/comments/1ky75x3/comment/m...

    Now you can also see the warning for specific keys in the google cloud UI (and that one seems correct)

  • by mvpreneur on 5/30/25, 1:58 AM

    Same here.. 1 Production apps, sign-ins occurring frequently. They only freaked out every Dev in the world..

  • by matt413 on 5/29/25, 3:21 PM

    Same here. Received it for 3 production apps with regular traffic going through Oauth. No idea how to "use them" while they're already in use.

  • by NoahZuniga on 6/2/25, 5:50 AM

    I got a corrected email today with less clients.