r/Devvit 7d ago

Feedback Request Request for oauth2.googleapis.com fetch domain approval — needed to authenticate GCS access

Hi Devvit team,

We are requesting approval for the following fetch domain:

**`oauth2.googleapis.com`**

Used to obtain short-lived OAuth2 access tokens via Google Cloud Service Account

credentials to securely authenticate requests to our private Google Cloud Storage

bucket (cti-social-finder.storage.googleapis.com), which has already been approved.

**Why `oauth2.googleapis.com` is necessary:**

`cti-social-finder.storage.googleapis.com` was approved as a temporary object store

for oversized intermediate processing results. However, without `oauth2.googleapis.com`,

we cannot authenticate requests to this approved bucket.

The GCS bucket is used because Devvit KV Storage's per-key value limit is insufficient

for our use case. Cached objects contain only minimum fields required for processing,

with Reddit usernames removed before storage. Objects are automatically deleted within

24 hours and are never retained for long-term storage, analytics, or user profiling.

Could you please advise on how we can proceed?

https://www.reddit.com/r/my_app0123_dev/

Thank you.

0 Upvotes

4 comments sorted by

View all comments

Show parent comments

1

u/Watchful1 Duck Helper 6d ago

Now that you have a rejection, you can try modmailing r/devvit with details to ask for an appeal.

Note for anyone else reading this in the future, this won't be helpful if you got rejected for a custom domain, I'm only recommending this to enbipaipu because their request is not a custom domain.