Wake Up’s missing Sunday and Monday editions were not a story-selection failure. The MiniMac importer could not authenticate to Google Drive after Saturday, October 24 at about 6:15 p.m. Google returned invalid_grant when the saved refresh token was used. That prevented the importer from reading Incoming, validating the packages, publishing pages and emailing the editions. A successful upload from ChatGPT and a successful publication by MiniMac are two different events.
The timing is diagnostic. A consent granted October 9 failed October 16; the October 17 consent failed October 24. Google’s own OAuth 2.0 documentation states that an external OAuth consent screen in Testing issues refresh tokens that expire after seven days when requesting scopes beyond basic identity. Drive access plainly exceeds that basic-identity exception. Repeating the consent process restores access for a week, not permanently.
The durable repair is in the Google Cloud project that owns Wake Up’s OAuth client. Open Google Auth Platform, verify that the client ID and scopes are the ones the MiniMac actually uses, and inspect Audience → Publishing status. If the project is External/Testing, change to In production when eligible. Google may require branding and scope verification, especially for sensitive or restricted permissions. Do not swap credentials or broaden scopes without checking the existing importer configuration.
After publishing, complete a fresh offline authorization so the importer stores a refresh token issued under the new configuration. Prove the fix by forcing a token refresh, listing Incoming, and observing a normal import. A published app’s refresh token is not literally permanent: revocation, inactivity and account limits can still invalidate it. Google’s docs list those cases.
The operational follow-through matters as much as the OAuth setting. Have the importer emit a clear, urgent authentication failure with the exact Google error, stop falsely marking editions delivered, and retry safely after re-authorization. Its recovery path should process the oldest waiting canonical package first, preserving the one-package-per-date rule and preventing duplicate email sends. Today’s package can be queued independently of whether MiniMac has fully recovered.
In Google Cloud, inspect Google Auth Platform → Audience for the Wake Up OAuth project; if External/Testing, move to In production, review scopes and re-authorize once. Then test a refresh and add an importer alert for invalid_grant.
Thumbnail source ↗