Improving user safety in OAuth flows through new OAuth Custom URI scheme restrictions- Google Developers Blog

This post announces the restriction of custom URI schemes for OAuth flows in new Chrome extensions and Android apps by default, to enhance user safety and prevent app impersonation. New Chrome extensions must use the Chrome Identity API. New Android apps will default to not allowing custom URI schemes, with a recommendation to use the Google Identity Services for Android SDK. Existing configurations are not affected but migration is strongly encouraged. User and developer-facing error messages for these changes are also detailed.