Project: (PII Removed by Staff) (no organization). Single OAuth client (“LetzCelebrate Web”, Web application). Scopes requested: calendar.readonly, calendar.events, userinfo.email — sensitive only, no restricted scopes.
Verification Center shows a warning on both cards:
- Branding status: “Your branding is not visible to users. You can see more details and verify your branding on the branding page.”
- Data access status: “You must verify and publish your branding before you can request verification.”
“Prepare for verification” is greyed out, and the Branding page has no “Verify Branding” button anywhere on it. I have read the page top to bottom.
Already ruled out on my side:
- Audience: user type External, publishing status In production.
- Branding page fully filled: app name, user support email, app home page (URL Removed by Staff), privacy policy ( URL Removed by Staff), terms of service ( URL Removed by Staff), developer contact email.
- Removing the app logo entirely and reloading changes nothing (logo restored since).
- Only one OAuth client in the project, no leftover clients.
- (URL Removed by Staff) is a verified Domain property in Search Console, on the same Google account that owns the project.
One question I could not answer from the documentation. My authorized domains list contains two *.supabase.co hostnames in addition to (URL Removed by Staff). They are required because my OAuth redirect URIs point at Supabase Edge Functions, and I cannot verify ownership of (URL Removed by Staff) in Search Console — it is a third-party service.
Does brand verification require every authorized domain to be owned by an account associated with the project? If it does, that would explain this state, and the Verification Center gives no hint of it. I understand this used to be handled during the review itself, by replying to the reviewer that those domains belong to a third-party service — but here I cannot even reach the submission step.
Same symptom as topics 381088 and 384177. The OAuth verification contact form returns a 404, so this forum is the only channel left.