nicmart-dev / linguistnow

LinguistNow simplifies the hassle of finding available linguists for translation projects.
https://linguistnow.netlify.app
1 stars 1 forks source link

Unnecessary sensitive permission required to get calendar list #57

Open nicmart-dev opened 3 months ago

nicmart-dev commented 3 months ago

Google requires sensitive permission to list calendars which causes this security prompt to always appear at user login:

Image

This is due to auth/calendar.readonlypermission in this code in the Login page.

Normally calendarList.readonly should be sufficient but Google requires this sensitive scope to just list calendars per their API doc.

Changing the permission indeed makes the login prompt disappear, but then error 403 is returned when CodeSelector component is trying to get calendar list.

nicmart-dev commented 3 months ago

Logged ticket in https://stackoverflow.com/questions/78615340/calendarlist-list-requires-unnecessary-sensitive-scope