From a201fdc437c62545066a9024edfd2c87ac2d98ef Mon Sep 17 00:00:00 2001 From: metatroncubeswdev Date: Wed, 21 Oct 2026 20:12:52 -0400 Subject: [PATCH] Google verification: scope justifications and demo video script Co-Authored-By: Claude Opus 5.5 --- docs/google-app.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/docs/google-app.md b/docs/google-app.md index 71fb6f5..e110521 100644 --- a/docs/google-app.md +++ b/docs/google-app.md @@ -34,3 +34,32 @@ Two Google Cloud projects, both owned by dev@metatroncubesolutions.com: 3. After deploy: **publish the app** (Audience → Publish app) and submit **verification** (sensitive YouTube scopes): Google asks for a demo video of the sign-in and how each scope is used. 4. **YouTube API audit** (free form) to lift the 10,000 units/day quota and the private-only upload limit. + +## Verification submission (paste-ready) + +**App purpose (both projects):** +> Quorla (https://quorlasocial.com) is a social media management tool for marketing agencies. An agency admin connects +> a client's Google account on Quorla's Connections page. The team prepares posts in Quorla; an admin reviews and +> approves the exact post, and Quorla publishes it at the scheduled time. Nothing is posted without that approval. +> Tokens are encrypted at rest and deleted when the account is disconnected. + +**Quorla project, scope justifications:** +- `youtube.upload`: Upload the video an agency admin approved in Quorla to the connected channel, with the title, + description, visibility and "made for kids" setting chosen on the post screen. Only approved posts are uploaded. +- `youtube.readonly`: Show which channel is connected (name, handle, avatar, subscriber count) on the Connections + page, so the agency posts to the right channel, and link to the uploaded video afterwards. + +**GMB Audit project, scope justification:** +- `business.manage`: List the business locations the connected account manages so the admin can pick the client's + location, and publish approved "updates" (local posts with text, photo and an optional button) to that location. + +**Demo video** (one recording, uploaded to YouTube as Unlisted; link it in both forms). Use English and show the +browser's address bar so the project's OAuth client ID is visible in the consent URL: +1. quorlasocial.com homepage → privacy policy link → Sign in at app.quorlasocial.com. +2. Connections → pick a client → YouTube → Connect → Google account chooser → consent screen showing **Quorla** and + the YouTube scopes → Allow → back in Quorla, channel shown as connected. +3. Publishing → New post → upload a vertical video → caption → tick YouTube → title, visibility → Save as draft → + Approve → post publishes → open the video on YouTube. +4. Connections → Google Business Profile → Connect → consent screen (business.manage) → choose the location. +5. New post with a photo → tick Google Business Profile → button "Learn more" → Approve → open the update on Google. +6. Connections → Disconnect, to show tokens can be removed.