Hi Lawrence, Thanks for getting back to us.
Kindly note that for the OAuth2 desktop app flow, you can persist a refresh token (which never expires) to obtain a new access token whenever necessary. When using one of our client libraries, you can authorize your app by filling out a configuration file. Since you are using Java, then you may use our latest client library which already migrated from OOB to redirect URL, and for local testing that's compatible with the default configuration in our client library examples, use http://127.0.0.1. You may also add a port number to your redirect URI to restrict usage to a specific port. If the port is not set, an OAuth client can redirect to any port. For Desktop app clients, you will still use a loopback IP redirect, but the URI is not explicitly configured in the Cloud console. With regards to verification, our documents says “We recommend that all apps undergo the Google OAuth verification process as soon as possible to avoid any business interruptions.” For information on OAuth Verification, and how to verify your projects, please refer to the below links: How to verify: OAuth API verification FAQs - Google Cloud Platform Console Help General information: Unverified apps - Google Cloud Platform Console Help However, if your app is going to be used in any of the following scenarios, you do not need to submit it for review: Personal Use: The app is not shared with anyone else or will be used by fewer than 100 users (all of whom are known personally to you). Note that your app will be subject to the unverified app screen and the 100-user cap will be in effect. Development/Testing/Staging: If your app’s publishing status is set to “Testing” and not “In production”, then you do not need to submit your app for verification. Note that your app will be subject to the unverified app screen and the 100-user cap will be in effect. Learn more about Publishing status. Service-owned Data Only: The app only accesses its own data (using a Service Account), and not user data (linked to a Google Account). To understand what service accounts are, see Service accounts. For instructions on using a service account, see Using OAuth 2.0 for Server to Server Applications. Internal Use: The app is used only by people in your Google Workspace or Cloud Identity organization. Note that your app will not be subject to the unverified app screen or the 100-user cap if it's marked as Internal. Learn more about public and internal applications. Learn how to mark your app as internal in the FAQ How can I mark my app as internal-only? Domain-wide Installation: The app is used only by Google Workspace enterprise users. Access will depend on permission being granted by the domain administrator. Google Workspace domain administrators are the only ones that can add the app to an allowlist for use within their domains. To learn how to make your app a Domain-Wide Install, see My application has users with enterprise accounts from another Google Workspace Domain. SMTP/IMAP/WP: The app is used to send emails through WordPress, or similar single-account SMTP plugins. Let us know how this goes on your end. Regards, Yasar Google Ads API Team ref:_00D1U1174p._5004Q2efNUO:ref -- -- =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ Also find us on our blog: https://googleadsdeveloper.blogspot.com/ =~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~=~ You received this message because you are subscribed to the Google Groups "AdWords API and Google Ads API Forum" group. To post to this group, send email to adwords-api@googlegroups.com To unsubscribe from this group, send email to adwords-api+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/adwords-api?hl=en --- You received this message because you are subscribed to the Google Groups "Google Ads API and AdWords API Forum" group. To unsubscribe from this group and stop receiving emails from it, send an email to adwords-api+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/adwords-api/7CUpA000000000000000000000000000000000000000000000RITZVK00dLh_VZyZQyW84Ot6m7j3xQ%40sfdc.net.