search

elementary / calendar

Desktop calendar app designed for elementary OS
https://elementary.io
GNU General Public License v3.0
131 stars 40 forks source link

"Less secure apps" being blocked by Google #751

Open lfvalerio opened 2 years ago

lfvalerio commented 2 years ago

As of now the mail and calendar apps, for being used with Google Accounts, need you to go to the settings of your account and to allow "Access to less secure apps", as cited below:

"What of this issue? I still cannot add a calendar as "less secure" sign-in strategies are blocked by Google.

Originally posted by @chances in https://github.com/elementary/calendar/issues/360#issuecomment-774785636"

The issue is: this option is going to be eliminated by Google in a month, so we will be unable to use our accounts with Elementary OS apps if they keep using simple authentication and CalDAV. I received an email from Google (which is in Portuguese) saying "Login with Google" or "OAuth 2.0" should be used instead. It also links to this page from Google that explains:

"To help keep your account secure, starting May 30, 2022, ​​Google will no longer support the use of third-party apps or devices which ask you to sign in to your Google Account using only your username and password.

Please note this deadline does not apply to Google Workspace or Google Cloud Identity customers. The enforcement date for these customers will be announced on the Workspace blog at a later date.

For more information, please continue reading.

Special Note on Apple Device Sign-Ins. Users who have not recently signed into their Google Account using only username and password will be able to only make new sign in attempts using the Google account type starting from February 28, 2022. Existing users may continue to sign into their Google Account using their username and password until May 30, 2022. If an app or site doesn’t meet our security standards, Google might block anyone who’s trying to sign in to your account from it. Less secure apps can make it easier for hackers to get in to your account, so blocking sign-ins from these apps helps keep your account safe."

danirabbit commented 2 years ago

Hey thanks for your report. This is a really unfortunate move for Google as they also control who they approve for an oauth integration and have not approved our application.

In the meantime I recommend creating an app password: https://support.google.com/accounts/answer/185833?hl=en

lfvalerio commented 2 years ago

Thanks for your answer Danielle, I'll be doing that!

chances commented 2 years ago

@danrabbit Has there been any indication from Google why your OAuth application has stalled?

mar0425 commented 2 years ago

Hey, I'm kinda having the same problem... using app passwords doesn't seem to work, it says "unauthorized" when I try to log in... I've got the two step verification option enabled... probably has to do with that... has anyone solved this issue? thanks

danirabbit commented 2 years ago

@chances No, at this point we should probably reapply

chances commented 4 months ago

@danirabbit

@chances No, at this point we should probably reapply

Who is in charge of re-applying? I'd love to be able to sync my Google calendar. Is there anything I can do to get that ball rolling?