[OS] GCM: Google Credential Manager

Google Sign-In for Android is deprecated and will be removed soon, migrate to Android Credential Manager.

This extension supports Sign in with Google using Android’s Credential Manager, with automatic sign-in for returning users.

It first looks for accounts that have previously signed in to your app, which keeps the flow quick. If none are found, it falls back to showing all accounts on the device in the system’s bottom sheet.

Blocks

Bottom Sheet Flow vs Button Flow

Bottom Sheet Flow: Normal vs Auto Select Enabled
telegram-cloud-document-5-6219768039437510236-ezgif.com-video-to-gif-converter telegram-cloud-document-5-6219768039437510242-ezgif.com-video-to-gif-converter

Auto Select works only when:

  1. Only one authorized account is on the device.
  2. The user hasn’t signed out of the app using SignOut block
  3. Automatic Sign-in is enabled in their Google Account.

Button flow
telegram-cloud-document-5-6219768039437510243-ezgif.com-video-to-gif-converter

Blocks for reference

Min SDK: 23 (Android 6.0)
Version name: 1.1
Updated on: 2026-10-10T15:14:00Z
AIX: com.yashsrv.gcm.aix (631.3 KB)

GitHub: GitHub - yashsrv/credential-manager-aix: Google's Credential Manager AIX for Kodular, Niotron and MIT App Inventor. · GitHub

Configure Google Auth Platform (for WebClientId):

  1. In Google Cloud Console, create or select a project.
  2. Go to APIs & Services → Google Auth Platform. Set the user type to External, fill in the app details, and add your test accounts under Audience → Test users while in Testing.
  3. Go to Credentials → Create Credentials → OAuth client ID and create an Android client with your app’s package name and SHA-1. For Play Store builds, use the App signing key SHA-1 from Play Console.
  4. Create a Web application client and copy its Client ID.

Tips for developers:

  1. Always treat uniqueId as the user's unique identifier, not email, email can change, so index your database with uniqueId.
  2. Send & verify the idToken with your backend and extract uniqueId, name, email and profilePicture. Do not trust user provided details.
  3. Google has made the brand verification compulsory if your app is in production, it is automatic now for non-sensitive scopes, roughly takes 5 minutes. Complete it before you launch your app.
3 Likes