I have been using the Blogger V3 api for many years. I use the official googleapis.com PHP library to retreive data and take care of the oAUth2 flow. Since a couple of days I cannot let users authorize my app anymore.
I did a lot of debugging and reading on the internet and here are my findings:
-
The access_token that I receive after a user has authorized us through the oAuth permission screen, is valid. I can use the Google library to fetch the userinformation with it. ( $oauth = new Google_Service_Oauth2($client); $userinfo = $oauth->userinfo->get(); )
-
The access_token is validated fine when using https://oauth2.googleapis.com/tokeninfo?access_token={token}
-
I can perfectly fetch Blogger information and content in the Google Playground when I enter the access_token that I have retreived using the oAuth flow on my server. So the access_token seems to work within the Google environment itself.
-
However, when I try to request the Blogger V3 api from my server, I keep bumping into an 403 error. For example: “Your client does not have
permission to get URL/v3/blogs/byurlfrom this server. That’s all we know.” -
Sending direct curl requests with the access_token as bearer in the Authorization header returns the same error.
I’m really lost. There are no notifications in my Google Cloud Console dashboard. It seems that the Blogger api just broke without a warning.
Anybody else have the same experience or can offer help? Thanks!