Google to deprecate OAuth out-of-band (OOB) flow on October 3, 2022,

Overview
A customer received an email from Google: 

"Hello Google OAuth Developer,

We are writing to inform you that OAuth out-of-band (OOB) flow will be deprecated on October 3, 2022, to protect users from phishing and app impersonation attacks. "

You can read a full copy of the message here:
https://wordpress.org/support/topic/google-oauth-oob-flow-warning/
 

The customer was concerned whether this would impact their Google connections in Auth0.
 

 

Solution
I should clarify that that Google are deprecating their Javascript libraries. They are NOT deprecating their OIDC or Oauth2 endpoints that we use here at Auth0. As you are using New Universal Login, you don't need to do anything and are not affected.

We're looking at the new Google Identity Services to see if we can plug into the ability to incorporate some of the great new front end features they are providing like user discovery and auto sign-in, OR if we'll need to add to New Universal Login to mimic those types of features.

In conclusion, the proposed Google change should have no impact on Auth0 customers.
 

Recommended content

No recommended content found...