I’m facing a problem I can’t seem to find a solution for. If someone could guide or help, I’d really appreciate it.
For any automation that uses Google APIs, the issue is that the refresh token expires after 7 days because my app is unverified. I submitted it for verification, but since my n8n instance is self-hosted on a VPS (not using the cloud) and I’m requesting access to sensitive and restricted scopes, Google requires a Letter of Validation (LoV) from a third-party security audit company, which costs around $1000.
Without that audit, whenever a client logs in to Google to add their credentials, they’ll see a big “unverified app” warning and will have to reauthorize every 7 days because the refresh tokens expire.
How am I supposed to serve clients like this? I’m really confused. Can someone please help?