microg / GmsCore

Free implementation of Play Services
https://microg.org
Apache License 2.0
7.68k stars 1.62k forks source link

Unable to access Google Two-Factor Authentication settings with phone registered to Google account #1720

Open Jenneke42 opened 2 years ago

Jenneke42 commented 2 years ago

Describe the bug Unable to access Google account Two-Factor settings because "Google Sign-In Prompt" does not function with microG. Google Two-Factor Authentication settings use three primary means of 2FA verification.

  1. Google Sign-In Prompt - Google sends a verification code to a phone which appears on-screen
  2. Authenticator app
  3. SMS/Phone

If a user has registered a phone number to a Google account (Unsure if Pixel exclusive) the default is Sign-In Prompt. Authentication requests can be requested via alternatives like an authenticator app. However, accessing Two-Factor Authentication Settings for a Google Account when a phone has been registered forbids the alternate methods. Only Google Sign-In Prompt is permitted as a 2FA method to access the settings page. Due to Calyx not running Google Play Services, these sign-in prompts cannot be received.

To Reproduce

  1. Sign in with username and password to a Google account URL used: https://myaccount.google.com/
  2. Go to Security screen (URL https://myaccount.google.com/security)
  3. Under 'Signing In to Google', click 2-Step Verification
  4. Re-Enter user password
  5. See Image 1, the Google Sign-In Prompt
  6. Click 'Use your phone or tablet to get a security code (even if it's offline) as shown in Image 2
  7. Follow directions provided in Image 3
  8. Menus are different in CalyxOS, on device, open Settings app
  9. Click Passwords & Accounts, and select the Google account
  10. Clicking any of the three options (Sign-in & security, Personal info & privacy, Account preferences) all lead to the same page, see Image 4.
  11. See microG Account settings: "Google Account Services not yet implemented."

Expected behavior Ability to receive 2FA code, or alternative method of providing a code (i.e. authenticator app_

Screenshots img01 img02 img03 img04

System Android Version: 12 Custom ROM: CalyxOS 3.5.1

Edit Dug a Chromebook out of storage and signed in with that, attempted to use that device as an alternative for authentication prompts. No result. Google settings on ChromeOS does not allow account management on my device.

Jenneke42 commented 2 years ago

I've updated the ticket with more specific links.

And some Matrix users suggested that only one 2FA method was enabled for the account, this is incorrect. Phone is registered to the account, permitting SMS verification, and an authenticator app is connected as well.

girokarambole1453 commented 10 months ago

Hello. This post may not solve your problem because I couldnt read all of this text(I am lazy af). So sorry If its not. I guess you have a google account that dont have any recovery number or email. And only way you can sign in to your account is to verify it with your phone that doesnt exist anymore(Also if you reseted it or something idk). For me I have created a google account on google private tab and then used it to sign in microG( I am using vanced). Then someday I wanted to delete that account so I tried to login my account but I didnt remember the passeord so it send a verification notification but i didnt get it maybe its because its signed in to microg not any other orginal google service on my phone or something else. whatever. So i thought i lost access to my account. but just a minute ago i found a solution. First you gotta install youtube music revanved extended. You can install pre made apks from mobilism if you dont wanna spend time on it then sign in to youtube music with your microg(it sign in automaticly sometimes) then you gotta go to settings. then privacy&locations then you gotts click to manage account privacy. AND THERE YOU HAVE IT.(It gotta show a youtube account management page) And from there you gotta press to manage all activity and you can do ehatever you want to do with yout google account. I am gonna add the screenshots after this post so you can unferstand easier. Have a nice day!!❤❤❤ Edit: if you dont wanna use pre made apks you can patch youtube with Revancify(which is a better way to get youtube music revanced extended to support inotia and decipher. If you have time do it with this method also you have all control to do with your patched apk :))))

girokarambole1453 commented 10 months ago

Screenshot_20230909-040652_ReVanced Extended Music Screenshot_20230909-040654_ReVanced Extended Music Screenshot_20230909-040659_ReVanced Extended Music

ale5000-git commented 9 months ago

@Jenneke42 Could you please re-try with the latest official nightly build?

Inside Legacy settings it still say Google Account Services not yet implemented but the others three elements are actually working.

Sense101 commented 4 months ago

@ale5000-git

To clarify, are you saying that a google sign in prompt now shows up past the september version? Because I've started to get an issue where google won't let me use a text message verification because there are "more secure options available", that being a google prompt. I'm using v0.2.26 as location doesn't work at all for me on later versions, but I can possibly patch my branch with a few commits if you can tell me which ones matter.

Thanks in advance.

ale5000-git commented 4 months ago

I don't know about such old version of microG but you can add these commits as they will allow to open Google security settings from account options in Android: https://github.com/microg/GmsCore/commit/b31072290a8bef20feeeba12ef31d9e29a22b63f https://github.com/microg/GmsCore/commit/dcf5f1fecb9add7e640a6bb780cb0c752e5c025e https://github.com/microg/GmsCore/commit/11001291e19333a1cb37f77196067222c76b4fb7

And this to make working the Google Authenticator app: https://github.com/microg/GmsCore/commit/e098483d655e01629da824b1ef906588bce4b3df

Sense101 commented 4 months ago

I don't know about such old version of microG but you can add these commits as they will allow to open Google security settings from account options in Android: b310722 dcf5f1f 1100129

And this to make working the Google Authenticator app: 449270c

Thanks. Would you know a way to modify the app's source itself to be able to detect the google sign in prompts and be able to return a response? I'm quite handy with java, and I have a lot of experience working with android, so I'd be more than happy to implement it myself, if you know where to start

ale5000-git commented 4 months ago

Unfortunately I don't know.

Sense101 commented 4 months ago

Unfortunately I don't know.

Alright, thanks anyways. If anyone else in the community has any idea, please give me a shout. I sell a product with MicroG baked in, and a lot of my customers are complaining now that google isn't letting them get a text anymore, only a notification, which of course does not work with MicroG.

As a side point, if there's any parts of this project that people need help with completion of, I'd be more than happy to assist.

ale5000-git commented 4 months ago

In my case the sms message is working; maybe because I only have the account in phones with microG. Meanwhile there is no better solution also access with Google Authenticator app is a solution.