I’m trying to complete OAuth app verification for my project, but the Verification Center shows:
-
Branding status: Verified

-
Data access status: Under review, but blocked by “Homepage requirements”

The error says: “Your app has not met homepage requirements. Homepage website is not registered.”
My setup:
-
GCP Project:
(PII Removed by Staff) -
Homepage URL:
https://ruribitaki2.web.app(Firebase Hosting) -
Privacy Policy:
https://ruribitaki2.web.app/privacy -
Terms of Service:
https://ruribitaki2.web.app/terms -
Authorized domains:
ruribitaki2.web.app,ruribitaki2.firebaseapp.com -
Domain ownership verified in Google Search Console under the same account as GCP project owner
-
Scopes:
analytics.readonly,analytics.manage.users.readonly,webmasters.readonly
What I’ve tried:
-
Verified domain ownership in Search Console (confirmed as owner)
-
Confirmed the same Google account owns both the GCP project and Search Console property
-
All OAuth consent screen fields are correctly configured
My question:
Is the web.app domain considered a “third-party platform where subdomain ownership cannot be verified”? Do I need to set up a custom domain on Firebase Hosting to pass the homepage requirement?
I cannot resubmit verification or contact the Trust & Safety team directly. No email has been received from them.
Any guidance would be appreciated.