Google OAuth tokens expire every 7 days if app stays in 'Testing' mode by default

·2 views

A developer's automated publishing pipeline repeatedly failed with an 'invalid_grant' token expiry error, initially mistaken for a previously fixed bug. The root cause was Google Cloud's OAuth consent screen defaulting to 'Testing' publishing status, which enforces a hard 7-day refresh token expiry regardless of how frequently the token is used. This setting, found under the Google Auth Platform's Audience tab, is not flagged during initial setup, making it easy to overlook. Unlike 'In production' status, which grants long-lived tokens, Testing mode is designed for short-lived experiments and restricts authentication to pre-approved test users. Switching the publishing status to 'In production' resolved the issue; for apps using only low-risk scopes like Blogger or Search Console, this change does not trigger Google's full verification review process.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Systems Development Student Shares Key Lessons Beyond Coding

A Systems Development student has reflected on lessons learned through academic projects involving programming, UML, data modeling, and system prototyping. The student noted that many software challenges arise before a single line of code is written, emphasizing the importance of understanding user needs and organizing information early. Working with diagrams and system models revealed how small design decisions can significantly impact an entire project's structure. The student concluded that logical thinking and problem-solving are just as vital as knowing a programming language like Python. These early experiences have shaped a broader view of software development as a process of understanding problems and turning them into practical solutions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Student Builds Educational Web App to Spotlight Paraíba Wildlife and Extinction Risks

A student developer is working on an academic front-end project called Animalia, aimed at raising awareness about the local fauna of Paraíba, Brazil, and the importance of environmental preservation. The web application is being built using VS Code and its extensions, with development currently in its early stages. The developer has encountered challenges around Git structure and version control, which have served as hands-on learning opportunities. Once complete, the app plans to offer educational content on local animals, including their characteristics and extinction status, as well as a personal album feature for users to log wildlife observations. The project is seen by its creator as both a practical exercise in applying technical skills and a step toward professional growth.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Key Engineering Lessons for Taking Multi-Agent AI Systems to Production

Building multi-agent AI systems that work reliably in production is significantly harder than creating a functional prototype, according to a technical analysis published on DEV Community. While early demos running in notebooks may appear stable, real-world conditions such as concurrent requests expose critical failure points including orchestrator routing loops, mismatched data contracts between agents, and uncontrolled state divergence. Accuracy compounds negatively across agent chains — a three-agent pipeline where each agent is 90% reliable produces fully valid output only about 73% of the time. The piece identifies four core failure categories: orchestrator collapse, contract drift, state explosion, and observability blindness, each requiring distinct engineering solutions. The author argues that production readiness must be treated as a core architectural concern from the start, not addressed after deployment.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Kubernetes Ignores Docker HEALTHCHECK, Routing Traffic to Unready Pods

Containers running on Kubernetes can report as 'healthy' via Docker's built-in HEALTHCHECK while still receiving live traffic before the application is ready. This happens because Kubernetes' kubelet does not read Docker's internal health state; it relies solely on its own livenessProbe, readinessProbe, and startupProbe defined in the pod manifest. Without a readinessProbe configured, Kubernetes marks a pod ready to receive traffic the moment the container process starts, regardless of application state. Docker Swarm, by contrast, does read Docker's HEALTHCHECK and will pull an unhealthy container from rotation accordingly. Developers migrating from Swarm or Docker Compose to Kubernetes must explicitly define Kubernetes-native probes in their manifests to ensure traffic is only routed to fully initialized pods.

0 comments Read more at DEV Community