How to get a Lovable app through Google OAuth verification

Your Lovable app works in testing. Then Google asks you to verify the OAuth client because you use Gmail, Drive, Calendar, or other sensitive scopes. Founders freeze here. Lovable isn't broken. Provider review is a product and compliance process, not a prompt.

#What “verification” actually means

Google and similar providers review apps that request user data beyond basic profile. They want a clear homepage, privacy policy, limited scopes, and proof that only the connecting user can access their data. Lovable can generate the UI. You still own the OAuth consent story.

#Prep checklist I run with clients

• Production domain on HTTPS with matching OAuth redirect URIs (preview URLs fail reviews).
• Public privacy policy that names the data you store and how to delete it.
• Minimal scopes. Don't request full Drive access if you only need one folder.
• Per-user tokens stored securely (never in a shared Supabase row without RLS).
• A short demo video: login, connect Google, use one feature, disconnect.

#Common rejection reasons

• Redirect URI or branding doesn't match the live app.
• Privacy policy is a placeholder or missing deletion instructions.
• Sensitive scopes with no clear in-app use.
• Test account credentials missing or app stuck in Testing with no path for reviewers.

Google OAuth review pack:
[ ] Live URL = consent screen homepage
[ ] Privacy policy URL live
[ ] Scopes list = features shown in demo
[ ] Reviewer test user + password
[ ] Disconnect / revoke works in UI

#Lovable + Supabase note

If tokens live in Supabase, treat them like passwords. Encrypt at rest when you can. Use RLS so user A never reads user B's refresh token. Refresh on a server or edge path, not in the browser. Same discipline as any production OAuth app. Lovable doesn't remove it.

#When to get help

Rejected twice, or you need Gmail or Drive scopes for a real product? Stop guessing. I harden the auth path, cut scopes, and prepare review assets so you're not blocked on launch day.