# Nylas Hosted Authentication Not Working **URL:** \ **Category:** Question and Answers\ **Created:** [September 27, 2024, 1:31pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471 "2024-09-27T13:31:14Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![backgroundbuddy](https://avatars.discourse-cdn.com/v4/letter/b/df788c/32.png) [@backgroundbuddy](https://forums.nylas.com/u/backgroundbuddy)\ **Post date:** [September 27, 2024, 1:31pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/1 "2024-09-27T13:31:14Z")
I have followed the documentation to the T and created a Google GCP external account with the required permissions. I have also created a connector on my nylas dashboard for google using my google client id and secrete plus google pub/sub project id. ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/3a07345e2962118caf0374d827838589ea06ce16.png) I am trying to authenticate users using the nylas hosted authentication urlForOAuth2 method. I am able to detect the provider successfully using the auth.detectProvider and the url has been generated successfully but then I get an error indicating the request is not allowed. I don’t know what I am doing wrong but I believe I don’t have to verify my app for this to work with hosted authentication? ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/96e5816fb126e9b45a01471e4a792a7c25f366fa.png) ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/b568deb1866e2a0aaefec36703c82aa472429039.png) ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/635a552fe77e9af2ac6b4c58a69bd624a0bb5d19.png) ---
**Author:** ![Blag](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.nylas.com/blag/32/9_2.png) [@Blag](https://forums.nylas.com/u/Blag)\ **Post date:** [September 27, 2024, 1:40pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/2 "2024-09-27T13:40:13Z")
Hello @backgroundbuddy Have you gone to the **Hosted Authentication** tab on the V3 Dashboard? After that you need to go to **Callback URIs** and add your **URL** like this… ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/3a42575302e2b86bf561f0ad688981f0b91b4103.png) ---
**Author:** ![backgroundbuddy](https://avatars.discourse-cdn.com/v4/letter/b/df788c/32.png) [@backgroundbuddy](https://forums.nylas.com/u/backgroundbuddy)\ **Post date:** [September 28, 2024, 11:55am UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/3 "2024-09-28T11:55:44Z")
Thanks @Blag that was the key but even with hosted authentication, google is still warning my app is not verified, is that the normal behaviour? Also I am unsure which of the events for messages will be triggered when the user receives a new message in my app? I checked the events for messages and couldn’t find that ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/4ce7f5314a3ccaaa2011e5cf792c233d840ecad9.png) Can you please let me know which one can help in my case? ---
**Author:** ![backgroundbuddy](https://avatars.discourse-cdn.com/v4/letter/b/df788c/32.png) [@backgroundbuddy](https://forums.nylas.com/u/backgroundbuddy)\ **Post date:** [September 28, 2024, 12:09pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/4 "2024-09-28T12:09:56Z")
Also please let me know how I can fetch the next bulk of messages if I want to fetch them in batches. I can see a nextCursor attribute, but I don’t know how that works. ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/4c8d0f8da30a09db2e959c1db8c1adbea894ec2d.png) ---
**Author:** ![Blag](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.nylas.com/blag/32/9_2.png) [@Blag](https://forums.nylas.com/u/Blag)\ **Post date:** [September 28, 2024, 4:01pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/5 "2024-09-28T16:01:36Z")
@backgroundbuddy That would be **message.created** 🙂 Regarding **app is not verified** that is normal if you’re on a Sandbox environment…if you want your app to be verified you would need to talk with support and/or sales. ---
**Author:** ![Blag](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.nylas.com/blag/32/9_2.png) [@Blag](https://forums.nylas.com/u/Blag)\ **Post date:** [September 28, 2024, 4:56pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/6 "2024-09-28T16:56:50Z")
@backgroundbuddy To use **nextCursor** you can call the messages endpoint [Nylas v3 Email, Calendar, and Contacts API docs | Nylas Docs](https://developer.nylas.com/docs/api/v3/ecc/#get-/v3/grants/-grant_id-/messages) and pass it to this parameter: ![image](https://us1.discourse-cdn.com/flex015/uploads/nylas3/original/1X/b70977aeb431d5303e037b7b36c180f5682ccaa8.png) ---
**Author:** ![backgroundbuddy](https://avatars.discourse-cdn.com/v4/letter/b/df788c/32.png) [@backgroundbuddy](https://forums.nylas.com/u/backgroundbuddy)\ **Post date:** [September 28, 2024, 5:35pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/7 "2024-09-28T17:35:08Z")
That’s a lot @Blag, that’s absolutely helpful. ---
**Author:** ![backgroundbuddy](https://avatars.discourse-cdn.com/v4/letter/b/df788c/32.png) [@backgroundbuddy](https://forums.nylas.com/u/backgroundbuddy)\ **Post date:** [October 1, 2024, 5:38am UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/8 "2024-10-01T05:38:41Z")
Hey @Blag I also mentioned the webhook event to receive a new message from a user. please can you help with that. 🙏 ---
**Author:** ![Paschal](https://avatars.discourse-cdn.com/v4/letter/p/90db22/32.png) [@Paschal](https://forums.nylas.com/u/Paschal)\ **Post date:** [September 22, 2025, 8:51pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/9 "2025-09-22T20:51:44Z")
I am also having similar issues with my Nylas integration where it says app is not verified, do I need to request verification of the scope through GCP or Nylas handles all that? My Nylas is a Paid account by the way ---
**Author:** ![akay](https://avatars.discourse-cdn.com/v4/letter/a/c37758/32.png) [@akay](https://forums.nylas.com/u/akay)\ **Post date:** [October 30, 2025, 7:40pm UTC](https://forums.nylas.com/t/nylas-hosted-authentication-not-working/471/10 "2025-10-30T19:40:11Z")
Hey @Paschal, Thanks for reaching out! The issue you’re seeing is likely due to **Google’s restrictions on unverified applications**. You’ll need to verify your **Google Cloud Platform (GCP)** project directly with Google — not Nylas. This involves completing their **OAuth verification** process (and possibly a **security assessment** if you’re using restricted scopes like gmail.readonly or gmail.modify). If you’d prefer **not to go through verification** , Nylas also offers a **Shared Verified Google Cloud Project** available on certain plans. Let us know if you’d like to explore this option, and we can loop in our Sales team. Please note that Google’s verification can take a few weeks, so it’s good to plan ahead. For details, you can review Google’s [App Verification Guide](https://developer.nylas.com/docs/provider-guides/google/google-verification-security-assessment-guide/) I hope this helps, please let us know if you have any questions