Skip to content

[Google Verification] Document Google OAuth scopes and justifications [INTEG-4138]#11013

Merged
Mitch Goudy (mgoudy91) merged 1 commit into
masterfrom
google-verification/integ-4138-oauth-scope-docs
Jun 5, 2026
Merged

[Google Verification] Document Google OAuth scopes and justifications [INTEG-4138]#11013
Mitch Goudy (mgoudy91) merged 1 commit into
masterfrom
google-verification/integ-4138-oauth-scope-docs

Conversation

@mgoudy91
Copy link
Copy Markdown
Contributor

Summary

  • Documents the two Google OAuth scopes configured for the Drive Integration app (drive.file and documents.readonly) in the README
  • Includes justification for why each scope is the minimum necessary
  • Notes token handling behavior (no persistent storage, Inngest KMS encryption, revocation support)

Context

Part of the Google OAuth verification process for project onyx-ivy-459019-g7. This documentation supports our ability to attest to Limited Use compliance (INTEG-4137) and provides a durable internal reference for the scope justifications we've already provided to Google via demo videos.

Closes INTEG-4138.

🤖 Generated with Claude Code

…ons [INTEG-4138]

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mgoudy91 Mitch Goudy (mgoudy91) requested review from a team as code owners June 5, 2026 17:13
@mgoudy91 Mitch Goudy (mgoudy91) enabled auto-merge (squash) June 5, 2026 17:18
Copy link
Copy Markdown
Collaborator

@JuliRossi JuliRossi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!


## Google OAuth Scopes

The app is registered under Google Cloud project `onyx-ivy-459019-g7` (Contentful Google Docs App). It requests the following OAuth scopes:
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❓ Do we need to include the project name as part of the docs?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah good q ill remove

@mgoudy91 Mitch Goudy (mgoudy91) merged commit aae02ae into master Jun 5, 2026
14 checks passed
@mgoudy91 Mitch Goudy (mgoudy91) deleted the google-verification/integ-4138-oauth-scope-docs branch June 5, 2026 18:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants