Problem Note 69214: The OAuth out-of-band flow that you use with SAS/ACCESS® Interface to Google BigQuery results in an authorization error
You might encounter the following authorization error when you use the OAuth out-of-band (OOB) flow with SAS/ACCESS Interface to Google BigQuery:
Error 400: invalid_request
SAS/ACCESS Interface to Google BigQuery provides a utility that generates the refresh token needed for OAuth authentication. Currently, the getRefreshToken uses the OOB flow. Google has announced that they are deprecating the use of OOB and will block all clients and users starting on October 3, 2022.
The following client IDs are impacted by this deprecation:
- IDs that previously generated a refresh token
- IDs that try to get the refresh token from Google for the first time when attempting to connect via the provided URL
For first attempts, an authorization error appears, as shown in the following image:

The utility was updated on 13OCT2022. The process has changed slightly with this update. Opening a browser with the URL provided results in an error that states that you cannot access the site. However, you can copy the necessary access token from the resulting URL. Copy the value after the ?code parameter (the value ends just before the &scope parameter). This is the access token that is provided to the utility to obtain the generated refresh token.
Operating System and Release Information
| SAS System | SAS Data Connector to Google BigQuery | Linux for x64 | Viya | |
| SAS System | SAS/ACCESS Interface to Google BigQuery | Linux for x64 | | |
| SAS System | SAS/ACCESS Interface to Google BigQuery (on SAS Viya) | Linux for x64 | Viya | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
| Type: | Problem Note |
| Priority: | high |
| Date Modified: | 2022-10-27 14:25:43 |
| Date Created: | 2022-05-20 15:12:22 |