Google deprecate OAuth out-of-band (OOB) flow on October 3, 2022

Problem Statement

We received an email from Google:

Hello Google OAuth Developer,

We are writing to inform you that OAuth out-of-band (OOB) flow will be deprecated on October 3, 2022, to protect users from phishing and app impersonation attacks.

A full copy of the message is here:

We are concerned about whether this would impact our Google connections in Auth0.

Solution

Google is deprecating its Javascript libraries NOT deprecating their OIDC or Oauth2 endpoints that we use here at Auth0.

We’re looking at the new Google Identity Services to see if we can incorporate some of the great new front-end features like user discovery and auto sign-in, OR if we’ll need to add to New Universal Login to mimic those features.

In conclusion, this proposed Google change should have no impact on Auth0 customers.