Can someone explain to me, why Google can't (or does not want to) implement the same auth flow that any other SaaS company uses:
# API Keys in Settings
1. Go to Settings -> API Keys Page
2. Create Token (set scope and expiration date)
# OAuth flow
1. `gws login` shows url to visit
2. Login with Google profile & select data you want to share
3. Redirect to localhost page confirms authentication
I get that I need to configure Project and OAuth screens if I want to develop an Applications for other users, that uses GCP services. This is fine. But I am trying to access my own data over a (/another) HTTP API. This should not be hard.
They definitely can, even gcloud cli can authenticate without needing to create a oauth app.
For compliance, my company already has a tool that scrapes all slack messages, and archives them for a required amount of years. I'm at a small company, so I assume large corporations have already refined this process.
What problem does this solve?
You are forced to use their MCP and their realtime search APIs, which don't work very well/not performant and may require additional licensing.