search

Zren / plasma-applet-eventcalendar

https://store.kde.org/p/998901/
469 stars 93 forks source link

Existing Google OOB Login Method Will Break On Oct 2022 #309

Open Zren opened 2 years ago

Zren commented 2 years ago

https://developers.googleblog.com/2022/02/making-oauth-flows-safer.html

OAuth out-of-band (oob) flow will be deprecated

OAuth out-of-band (OOB) is a legacy flow developed to support native clients which do not have a redirect URI like web apps to accept the credentials after a user approves an OAuth consent request. The OOB flow poses a remote phishing risk and clients must migrate to an alternative method to protect against this vulnerability. New clients will be unable to use this flow starting on Feb 28, 2022.

Migrate to an alternative flow

If your app is using the OOB method you need to migrate to another method which is more secure by default. Please consider the following alternative methods for migration.

Key dates for compliance

  • Feb 28, 2022 - new OAuth usage will be blocked for the OOB flow
  • Sep 5, 2022 - a user-facing warning message may be displayed to non-compliant OAuth requests
  • Oct 3, 2022 - the OOB flow is deprecated for existing clients
printesoi commented 2 years ago

This already is affecting me. When opening the link in the browser I get:

Access blocked: KDE Event Calendar Widget’s request is invalid

You can’t sign in because KDE Event Calendar Widget sent an invalid request. You can try again later, or contact the developer about this issue. Learn more about this error If you are a developer of KDE Event Calendar Widget, see error details. Error 400: invalid_request

jrobbom5 commented 2 years ago

Just wanted to add that this has started to affect me too. I have uninstalled the widget and updated to the git version, but I keep getting this error when trying to configure google calendar

thangisme commented 2 years ago

This already is affecting me. When opening the link in the browser I get:

Access blocked: KDE Event Calendar Widget’s request is invalid

You can’t sign in because KDE Event Calendar Widget sent an invalid request. You can try again later, or contact the developer about this issue. Learn more about this error If you are a developer of KDE Event Calendar Widget, see error details. Error 400: invalid_request

I'm facing the same issue

ak1ra26 commented 1 year ago

Same

tmielsch commented 1 year ago

Same

luyisimiger commented 1 year ago

Hello everybody,

The bug persists ... any date for close this issue?