Google OAuth verification

Verification Information

Application: Orlixea · Environment: Production

This page summarizes the exact production behavior presented for OAuth verification. It is intended to make scope and functionality review straightforward.

Application purpose

Orlixea is a Telegram-based interface that lets each user connect their own Google account and perform specific Gmail and YouTube actions. Authorization is per user, and every write action requires an explicit user request and confirmation.

Exact OAuth scopes requested

ScopeWhy it is neededUser-visible action
https://www.googleapis.com/auth/gmail.sendRequired to send a message from the connected Gmail account.User enters recipient, subject, and body → reviews → confirms Send.
https://www.googleapis.com/auth/youtubeRequired for the YouTube write actions currently implemented.User selects a channel or video → reviews target → confirms Subscribe or Like.

Production features

  • Connect a user's own Google account through Google OAuth 2.0.
  • Send a Gmail message after explicit review and confirmation.
  • Subscribe to one user-selected YouTube channel after confirmation.
  • Like one user-selected YouTube video after confirmation.
  • Display connection status.
  • Disconnect Google, revoke access, and delete stored authorization data.

AI/ML disclosure

Orlixea does not use, integrate with, or transfer Google user data to any third-party, hosted, self-hosted, or offline AI/ML service. No Google API user data is used for model creation, training, fine-tuning, evaluation, or improvement.

Functions not implemented

  • No Gmail inbox reading or mailbox browsing.
  • No YouTube comment-posting feature.
  • No automated or artificial video-view generation.
  • No bulk, background, or incentivized YouTube engagement.
  • No cross-user access to another user's connected Google account.

End-to-end reviewer test flow

Connect Google

Choose Connect Google in Orlixea and complete Google's OAuth consent screen.

Complete callback

Google returns to the Orlixea callback page. Copy the one-time authorization response back to the private Telegram chat to complete linking.

Test Gmail Send

Enter a recipient, subject, and body. Review the displayed values and explicitly confirm Send.

Test YouTube Subscribe / Like

Select a specific channel or video and explicitly confirm the requested action.

Disconnect Google

Select Disconnect Google. Orlixea revokes access and deletes the user's locally stored authorization and temporary workflow state.

OAuth callback URI

https://app.myjup5anqe.dpdns.org/oauth/callback/

Privacy and security documentation