Google Android · Authentication Profile

Google Android Authentication

Authentication

Google Android secures its APIs with oauth2 across 1 declared security scheme, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and jwtBearer (service account) flow(s).

AndroidGoogleMobile DevelopmentMobile Operating SystemOpen-Source
Methods: oauth2 Schemes: 1 OAuth flows: authorizationCode, jwtBearer (service account) API key in:

Security Schemes

OAuth2 oauth2
· flows: authorizationCode, serviceAccount

Source

Authentication Profile

Raw ↑ 
generated: '2026-06-20'
method: searched
source: Google Discovery documents + https://developers.google.com/android/management/authentication
docs:
  - https://developers.google.com/android/management/authentication
  - https://developers.google.com/identity/protocols/oauth2
  - https://developers.google.com/identity/protocols/oauth2/service-account
summary:
  types:
    - oauth2
  oauth2_flows:
    - authorizationCode
    - jwtBearer (service account)
  identity_host: https://accounts.google.com
schemes:
  - name: OAuth2
    type: oauth2
    flows:
      - flow: authorizationCode
        authorizationUrl: https://accounts.google.com/o/oauth2/v2/auth
        tokenUrl: https://oauth2.googleapis.com/token
        use: interactive user consent
      - flow: serviceAccount
        mechanism: JWT bearer (RFC 7523) exchanged at token endpoint; optional domain-wide delegation
        tokenUrl: https://oauth2.googleapis.com/token
        use: server-to-server (recommended for enterprise/EMM automation)
    sources:
      - openapi/google-android-openapi.yml
notes: >-
  Every API in this repo authenticates with Google OAuth 2.0 access tokens (Bearer)
  scoped per Discovery document (see scopes/). Server integrations use Google service
  accounts (JWT bearer). Firebase Cloud Messaging additionally supports the Firebase
  Admin SDK credential flow. Play Integrity verdicts are additionally protected by
  Google-managed keys. No API keys or basic auth are used for these management APIs.