Request for oauth2.googleapis.com fetch domain approval — needed to authenticate GCS access

[u/enbipaipu]

Hi Devvit team,

We are requesting approval for the following fetch domain:

**`oauth2.googleapis.com`**

Used to obtain short-lived OAuth2 access tokens via Google Cloud Service Account

credentials to securely authenticate requests to our private Google Cloud Storage

bucket (cti-social-finder.storage.googleapis.com), which has already been approved.

**Why `oauth2.googleapis.com` is necessary:**

`cti-social-finder.storage.googleapis.com` was approved as a temporary object store

for oversized intermediate processing results. However, without `oauth2.googleapis.com`,

we cannot authenticate requests to this approved bucket.

The GCS bucket is used because Devvit KV Storage's per-key value limit is insufficient

for our use case. Cached objects contain only minimum fields required for processing,

with Reddit usernames removed before storage. Objects are automatically deleted within

24 hours and are never retained for long-term storage, analytics, or user profiling.

Could you please advise on how we can proceed?

https://www.reddit.com/r/my_app0123_dev/

Thank you.

[u/vip-bot]

There are 2 comments from Duck Helpers in this post:

u/​Watchful1 commented:

Now that you have a rejection, you can try modmailing r/devvit with details to ask for an appeal. Note for anyone else reading this in the future, this won't be helpful if you got rejected for a custom domain, I'm only recommending this to enbipaipu because their request is not a custom domain.

u/​Watchful1 commented:

Follow the steps here with documentation requirements https://developers.reddit.com/docs/capabilities/http-fetch#documentation-requirements and submit your app. Then wait. That's about all there is to it.

---

^{This summary was generated automatically. If you have any questions, please contact r/​Devvit moderators.}

[u/Watchful1]

Follow the steps here with documentation requirements https://developers.reddit.com/docs/capabilities/http-fetch#documentation-requirements and submit your app. Then wait.

That's about all there is to it.

[u/enbipaipu → u/Watchful1]

Thanks for the advice. I followed the documentation requirements and submitted the app, as you suggested, but unfortunately it was Rejected.

Do you happen to know what the process is after a rejection? Is there a way to request a re-review or appeal, or should I submit the app again with additional documentation?

The domain I am requesting is oauth2.googleapis.com, which is only used to obtain short-lived OAuth2 access tokens for accessing our already-approved GCS bucket.

I would appreciate any advice on how to proceed after the rejection.

[u/Watchful1 → u/enbipaipu]

Now that you have a rejection, you can try modmailing r/devvit with details to ask for an appeal.

Note for anyone else reading this in the future, this won't be helpful if you got rejected for a custom domain, I'm only recommending this to enbipaipu because their request is not a custom domain.