Authentication
Querylab.io connects to BigQuery using your Google account.
OAuth Scopes
Required
| Scope | Purpose |
|---|---|
profile, email | Your identity |
bigquery | Query execution and metadata access |
Optional (granted when you use the feature)
| Scope | Feature |
|---|---|
cloudplatformprojects.readonly | Project discovery during setup |
cloud-platform | Scheduled queries (BigQuery Data Transfer API) |
drive.file | Export results to Google Sheets |
Auth Methods
Google OAuth (Web & Desktop)
Sign in with your Google account. Additional scopes are requested only when needed.
Application Default Credentials (Desktop only)
Use your local gcloud CLI credentials:
gcloud auth application-default login
Select Use ADC in Querylab.io. Tokens stay on your machine.
Token Storage
| Platform | Storage |
|---|---|
| Web | Encrypted on our servers |
| Desktop | OS Keychain (never sent to our servers) |