- Shipped
- September 5, 2026 at 1:52 AM UTC
- Author
- Kamo
- Commit
- 1929dbe
Two silences that made a working Google Workspace connection read as broken. The mailbox sync caught the provider's rejection and dropped it. Google refuses the Admin SDK call with an unusually actionable sentence -- "Admin SDK API has not been used in project N ... enable it" -- and none of it reached the screen; the only symptom left was an empty table under "No mailboxes found", which says the org has no mailboxes when what actually happened is that nobody was allowed to ask. The Google Workspace panel's service-account key box was write-only. It held local state that started empty and was never reconciled with the server, so an org whose key had saved perfectly rendered exactly like one that had never saved a key. It now reads back what the server says is stored -- and names the service account, plus the client id the Admin console asks for when authorizing domain-wide delegation -- while the key itself stays server-side.