#34 ‘Cloud Idenity’ is a secret well kept by Google

Permissions on Google Cloud resources are assigned to principals. Principals, in principle 😏, are Google accounts. My personal @gmail.com address, for example, is the principal that "owns" most of my Google Cloud stuff. So far, so good. However, in some cases, I was required to delegate ownership of a resource to a principal with an @poketto.me email address — a domain for which I don’t have a Google Workspace account. Consequently, these addresses aren’t recognized as regular Google Accounts. (See exhibit A) ...

August 3, 2025

#14 The process to get an app into Google Play is… byzantine

🏗️First, of course, you actually got to build your app. Then you register at the Google Play Console (and fork over $25). Then you provide your name, contact details, etc. and then the fun starts: You need official ID (drivers license, passport), proof of residence (“Meldezettel” in Austria), proof that you own an Android device, install the Google Play Console App on that device, and verify your contact phone number. ...

July 14, 2025

#13 "Token used too early" — the weirdest Google Sign-In error.

I’ve had my ups and downs with “Sign in with Google”: ⬆️It’s simple and works well on the web ⬇️It’s a complete hassle inside a hosted WebView in a native mobile app But here’s something really funny: I local clock is ahead of Google's — sometimes by as little as a few milliseconds – the sign in call will fail with “Token used too early.” 🤯 ✅ Solution: resync your system clock (in my case, my MacBook with Apple's time server). ...

July 13, 2025