# Token creation/replacement failing - Google Drive

**URL:** <https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279>\
**Category:** Help and Support\
**Created:** [September 27, 2026, 3:38pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279 "2026-09-27T15:38:22Z")\
**Posts on this page:** 16\
**Page:** 1

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 27, 2026, 3:38pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/1 "2026-09-27T15:38:22Z")

</div>

#### What is the problem you are having with rclone?

This may be a problem of configurations from Google Drive's side, but I need help!

#### Long story short:

> I have problems replacing the token when executing the `rclone config` command.

Basically, I followed the recent prompt on creating client ID + client secret over [this section of the guide](https://rclone.org/drive/#making-your-own-client-id). Unfortunately, when editing the configuration of my remote and replacing the existing token, it waits for the code that the web returns, but after selecting my account and trying the "Go to rclone (not safe)" button...

 ![Google fails to verify](https://forum.rclone.org/uploads/default/original/3X/9/9/9954de06f9ad531315fa695c7caca64f82186629.png)  
 ![Google timeout error](https://forum.rclone.org/uploads/default/original/3X/8/b/8b3808a1ad3cfc88c4e6cd07205afdcd5179bd3e.png)  
... It pops up a prompt telling me it FAILED. Trying again, reloading the webpage, retrying the config command, nothing seems to do it.

> I should point out that the "publish" steps over the Google Console Cloud **failed me**. It asks for branding verification, telling me I do not own the domain's link I provided ([https://github.com](https://github.com)). I seriously don't know what to do here... ☹

#### Run the command 'rclone version' and share the full output of the command.

```bash
|> $ rclone version
rclone v1.75.1
- os/version: linuxmint 22.3 (64 bit)
- os/kernel: 7.0.0-31-generic (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.26.8
- go/linking: static
- go/tags: none

```

#### Which cloud storage system are you using? (eg Google Drive)

_Google Drive_, as stated in title.

#### The command you were trying to run (eg `rclone copy /tmp remote:tmp`)

```bash
# 1° command tried:
rclone config

# 2° command tried:
rclone config reconnect <name_of_remote>:

```

#### Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

```bash
|> $ rclone config redacted 
[ivan]   
type = drive
scope = drive
token = XXX
team_drive = 
client_id = XXX
client_secret = XXX
export_formats = link.html

```

#### A log from the command that you were trying to run with the `-vv` flag

```bash
|> $ rclone config reconnect ivan: -vv
2026/09/27 12:32:48 DEBUG : rclone: Version "v1.75.1" starting with parameters ["rclone" "config" "reconnect" "ivan:" "-vv"]
2026/09/27 12:32:48 DEBUG : Using config file from "/home/iyopolo/.config/rclone/rclone.conf"
2026/09/27 12:32:48 DEBUG : ivan: config in: state="", result=""
2026/09/27 12:32:48 DEBUG : ivan: config out: out={State:"client_id" Result:""}, err=<nil>
2026/09/27 12:32:48 DEBUG : ivan: config in: state="client_id", result=""
2026/09/27 12:32:48 DEBUG : ivan: config out: out={State:"oauth" Result:""}, err=<nil>
2026/09/27 12:32:48 DEBUG : ivan: config in: state="oauth", result=""
2026/09/27 12:32:48 DEBUG : ivan: config out: out={State:"*oauth,teamdrive,oauth," Result:""}, err=<nil>
2026/09/27 12:32:48 DEBUG : ivan: config in: state="*oauth,teamdrive,oauth,", result=""
2026/09/27 12:32:48 DEBUG : ivan: config out: out={State:"*oauth-confirm,teamdrive,oauth," Option:config_refresh_token="true" Result:""}, err=<nil>
2026/09/27 12:32:48 DEBUG : ivan: config: reading config parameter "config_refresh_token"
Token already configured - replace it?
y) Yes (default)
n) No
y/n> y

2026/09/27 12:32:51 DEBUG : ivan: config in: state="*oauth-confirm,teamdrive,oauth,", result=XXX
2026/09/27 12:32:51 DEBUG : ivan: config out: out={State:"*oauth-islocal,teamdrive,oauth," Option:config_is_local="true" Result:""}, err=<nil>
2026/09/27 12:32:51 DEBUG : ivan: config: reading config parameter "config_is_local"
Use web browser to automatically authenticate rclone with remote?
 * Say Y if the machine running rclone has a web browser you can use
 * Say N if running rclone on a (remote) machine without web browser access
If not sure try Y. If Y failed, try N.

y) Yes (default)
n) No
y/n> y

2026/09/27 12:32:53 DEBUG : ivan: config in: state="*oauth-islocal,teamdrive,oauth,", result=XXX
2026/09/27 12:32:53 DEBUG : ivan: config out: out={State:"*oauth-do,teamdrive,oauth," Result:""}, err=<nil>
2026/09/27 12:32:53 DEBUG : ivan: config in: state="*oauth-do,teamdrive,oauth,", result=""
2026/09/27 12:32:53 NOTICE: Make sure your Redirect URL is set to "http://127.0.0.1:53682/" in your custom config.
2026/09/27 12:32:53 DEBUG : Starting auth server on 127.0.0.1:53682
2026/09/27 12:32:53 NOTICE: If your browser doesn't open automatically go to the following link: http://127.0.0.1:53682/auth?state=vS8JAo7kvNRrlAI5XGJ9ig
2026/09/27 12:32:53 NOTICE: Log in and authorize rclone for access
2026/09/27 12:32:53 NOTICE: Waiting for code...
2026/09/27 12:32:53 DEBUG : Redirecting browser to: https://accounts.google.com/o/oauth2/auth?access_type=offline&client_id=59526917629-egkh48vl01nbltdoteova5fpb8kd6kbs.apps.googleusercontent.com&redirect_uri=http%3A%2F%2F127.0.0.1%3A53682%2F&response_type=code&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fdrive&state=vS8JAo7kvNRrlAI5XGJ9ig
# Blinking cursor...

```

* * *

Any feedback is appreciated!

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 27, 2026, 4:10pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/2 "2026-09-27T16:10:58Z")

</div>

google doesnt need the app published for personal use. leave it in Testing and add ur google account under Audience → Test users.

also check:  
-oauth client type is Desktop app  
-authorized redirect URI is exactly [http://127.0.0.1:53682/](http://127.0.0.1:53682/) (rclone prints that)

the [github.com](http://github.com) homepage + publish branding check is a dead end, skip publish entirely.

if the auto browser still fails:  
-say N when rclone asks about local browser  
-open the auth url it prints  
-paste the code back into the terminal

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 27, 2026, 6:31pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/3 "2026-09-27T18:31:41Z")

</div>

I left it back in "Testing". The desktop app was selected. But, both auto-browser and the negated option failed.

Now in testing, it fails at a slightly different screen, but it's practically the same:

 ![image](https://forum.rclone.org/uploads/default/original/3X/d/4/d452065b584d20ed9c88936e6367dac4a911c1ca.png)

 ![image](https://forum.rclone.org/uploads/default/original/3X/8/2/82ab8877b453d0530d5a88a21b71bdf8b9c924d1.png)

_"An error appeared."_

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 27, 2026, 8:05pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/4 "2026-09-27T20:05:58Z")

</div>

"An error appeared" after Testing usually means the oauth client is toast, not the publish switch.

-enable Google Drive API under APIs & Services → Library  
-make a fresh Desktop oauth client, dont reuse the old one  
-redirect uri exactly [http://127.0.0.1:53682/](http://127.0.0.1:53682/)  
-Audience → Test users add the same google account u sign in with, wait like 10 min

then in a private window:  
rclone authorize "drive" "CLIENT\_ID" "CLIENT\_SECRET"

paste the json token back into the remote config. if it still bombs try the auth url on phone hotspot.

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 27, 2026, 9:29pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/5 "2026-09-27T21:29:47Z")

</div>

1. Google Drive API is already enabled.
2. What do you mean by redirecting the URI? I don't follow what to do right there.
3. I did add myself as a test user.

* * *

> [@nite\_route](#):
>
> paste the json token back into the remote config. if it still bombs try the auth url on phone hotspot.

You mean the client json secret downloaded from the Google Cloud Console?  
Also, where exactly do I copy the contents to inside the config file?

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 27, 2026, 10:14pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/6 "2026-09-27T22:14:08Z")

</div>

redirect uri is a field on the oauth client itself in google cloud console.

-APIs & Services → Credentials → ur Desktop client  
-Authorized redirect URIs → add [http://127.0.0.1:53682/](http://127.0.0.1:53682/)  
-save

then:  
rclone authorize "drive" "CLIENT\_ID" "CLIENT\_SECRET"

that prints a blob starting with {"access\_token":...}. that blob is what rclone wants when it asks for the token. not the client\_secret json u downloaded from google.

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 27, 2026, 11:15pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/7 "2026-09-27T23:15:31Z")

</div>

I can't see anything about URIs:

 ![image](https://forum.rclone.org/uploads/default/original/3X/3/0/30c45502da52d63da45314409e43560917a2b088.png)  
 ![image](https://forum.rclone.org/uploads/default/original/3X/2/e/2e045186b219968dd41149f3b702d236f1a5331d.png)

Am I missing something, or is it perhaps in another section?

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 28, 2026, 12:17am UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/8 "2026-09-28T00:17:59Z")

</div>

yeah that new google console hides redirect uris on some Desktop clients.

edit the oauth client. if theres no Authorized redirect URIs block, make a new client as Web application and put:  
[http://127.0.0.1:53682/](http://127.0.0.1:53682/)  
under Authorized redirect URIs. then use that client id/secret w/ rclone authorize.

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 28, 2026, 10:59pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/9 "2026-09-28T22:59:20Z")

</div>

Hi, sorry for the delay, back from uni.

Okay, so as a web application there was a field for URIs, fortunately:

 ![image](https://forum.rclone.org/uploads/default/original/3X/c/c/cc76437a6be7239e8d65ec5a7e89f62466518c9f.png)

I tried it, and I got the same result as here:

> [@pelucActron](#):
>
> "An error appeared."

I even tried with another account that I added to the testers' list.

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 29, 2026, 12:12am UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/10 "2026-09-29T00:12:54Z")

</div>

same "an error appeared" on a web client usually means the oauth consent app is still blocked on googles side for me.

check:  
-oauth consent screen → Publishing status Testing  
-user type External (or Internal if workspace)  
-test users list has the exact account, wait ~15 min after edits

then from a phone hotspot:  
rclone authorize "drive" "CLIENT\_ID" "CLIENT\_SECRET" --auth-no-open-browser

if google still pops that generic error, the gcp project itself is flagged. make a brand new project + new client, dont reuse this one.

---

<div class="post-metadata">

**Author:** ![Edcw](https://forum.rclone.org/user_avatar/forum.rclone.org/edcw/32/15492_2.png) [@Edcw](https://forum.rclone.org/u/Edcw)\
**Post date:** [September 29, 2026, 11:54am UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/11 "2026-09-29T11:54:06Z")

</div>

@nite_route

> " the [github.com](http://github.com/) homepage + publish branding check is a dead end, skip publish entirely."

Do you think it is worth removing this from the docs now and is it worth updating step 9 again in [Google drive](https://rclone.org/drive/#making-your-own-client-id) docs?

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [September 29, 2026, 6:15pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/12 "2026-09-29T18:15:30Z")

</div>

yeah id yank the github homepage + publish branding bit from the drive docs. testing + test users is what actually works now.

step 9 can just say stay on Testing, add the exact account under test users, wait a few minutes, then rclone authorize. skip publish entirely.

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [September 29, 2026, 7:32pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/13 "2026-09-29T19:32:46Z")

</div>

Testing status.  
 External type.  
 Test users includes me (done it yesterday).  
Same error ocurred...

* * *

I created a new project, desktop based, and the same error happened.

---

<div class="post-metadata">

**Author:** ![nite\_route](https://forum.rclone.org/user_avatar/forum.rclone.org/nite_route/32/21758_2.png) [@nite\_route](https://forum.rclone.org/u/nite_route)\
**Post date:** [October 1, 2026, 6:11pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/14 "2026-10-01T18:11:55Z")

</div>

if a brand new desktop client + testing + ur account as test user still pops that generic error, id try:

-add a totally different google account as a test user and auth with that one  
-confirm Google Drive API is enabled on the gcp project (apis & services → enable)  
-rclone authorize "drive" CLIENTID CLIENTSECRET --auth-no-open-browser then open the printed url in a private window

if advanced protection is on for the google account that can also hard-fail oauth with a useless error page.

---

<div class="post-metadata">

**Author:** ![pelucActron](https://forum.rclone.org/user_avatar/forum.rclone.org/pelucactron/32/21825_2.png) [@pelucActron](https://forum.rclone.org/u/pelucActron)\
**Post date:** [October 6, 2026, 9:48pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/15 "2026-10-06T21:48:33Z")

</div>

Ok something pretty weird happened, but **I have found the solution**.

Instead of entering the infinite rabbit hole of changing the Google project I tried this: _using another web browser_. My default is Firefox on Linux, and what other better candidates than the creators of ~~Google~~ Drive?

So I tried the following:

```auto
rclone authorize "drive" <CLIENTID> <CLIENTSECRET> --auth-no-open-browser

Paste the following link in the browser: ...

```

Then I pasted the link in **Google Chrome** , and the whole operation resulted in a success!

Got the code, and ran:

```bash
$ rclone config reconnect ivan:

Token already configured. Reconfigure it?
> y

Open on web browser automatically?
> n

Run <...> command on another machine with web browser access and paste the code here:
> <copied_token>

Success!

```

* * *

I don't know why this worked, but it worked, so we can finally close this thread and conclude that, somehow, browsers affect this behaviour.  
Any comments before closing this one for good?

> Also, I tried to copy files from local to remote and it works, confirming the results.

---

<div class="post-metadata">

**Author:** ![system](https://forum.rclone.org/uploads/default/original/2X/3/39ad3235f6ffec76ccd0c81616bd55697b4c300d.png) [@system](https://forum.rclone.org/u/system)\
**Post date:** [October 9, 2026, 9:49pm UTC](https://forum.rclone.org/t/token-creation-replacement-failing-google-drive/54279/16 "2026-10-09T21:49:29Z")

</div>

Closed on October 9, 2026, 9:49pm UTC

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.