Home · App Functionality · Privacy Policy

OAuth consent test instructions

Last updated: September 12, 2026

These instructions are for Google Trust and Safety / OAuth verification reviewers. They explain exactly how to reach Climax’s Google OAuth consent screens without any private setup.

Path A — Sign in with Google (sign-in scopes)

Use this path to test the Google identity consent screen (`openid`, `email`, `profile`).

1. Open https://climaxcybra.cloud/ in a desktop browser.
2. On the auth screen, click Sign in with Google.
3. Choose any Google Account you control.
4. Complete the Google OAuth consent / account chooser screens.
5. You are returned to Climax signed in.

Path B — Connect Gmail / Calendar (sensitive scopes) — preferred for data-access review

Use this path to test the full Google Workspace OAuth consent for Calendar and Gmail scopes.

1. Open https://climaxcybra.cloud/.
2. Click through to the email sign-in form (Log In / email sign-in).
3. Sign in with the reviewer account: oauth-reviewer@climaxcybra.cloud / ClimaxReview-2026!
4. After login, open https://climaxcybra.cloud/?section=connections or tap/open Connect Your Apps / Connections.
5. Find Gmail or Google Calendar.
6. Click Connect / the Google connect action.
7. Google redirects to the OAuth consent screen requesting:
   • https://www.googleapis.com/auth/calendar
   • https://www.googleapis.com/auth/gmail.readonly
   • https://www.googleapis.com/auth/gmail.send
   • plus sign-in scopes as needed
8. Approve access. You return to Climax Connections with Gmail/Calendar marked connected.

How to verify the requested scopes are actually used

1. Keep Google connected from Path B.
2. Open Chat in Climax.
3. Ask: “Create a 15-minute calendar reminder tomorrow at 10 AM titled OAuth review test.”
4. Ask: “Summarize my recent Gmail inbox.”
5. Climax uses Calendar write/list and Gmail readonly only for those user-requested actions. Sending email uses gmail.send only when the user asks to send a message.

Expected result

• Reviewers can reach Google’s OAuth consent UI without contacting the developer first.
• No payment wall, no waitlist, no admin approval step inside Climax.
• Consent can be revoked afterward from the user’s Google Account permissions page.

Publishing status note

Climax is configured for production use at https://climaxcybra.cloud. If Google Cloud OAuth publishing status is still “Testing”, please ensure the project is In production so reviewer Google accounts are not blocked by the test-user allowlist. The Climax reviewer password account above still works for app login in either case.

Related pages

• Homepage / purpose
• App functionality summary
• Google API Disclosure
• Privacy Policy
• Terms of Service