Not working due to security issue after entering email address.

[nikwilliamson]

When beginning the auth flow, getting an error saying, "Google couldn’t confirm this attempt to sign in is safe. If you think this is a mistake, you can close and try again to sign in.". This happens with and without the headers, and in the web version and the chrome version.

Unable to resolve.

[AngeloD2022]

Google appears to have made a change to the API. Thanks for the information.

[AngeloD2022]

Previously, the extension exploited a vulnerability by generating a fake device challenge for the AuthAdvice endpoint. The vulnerability was that the endpoint was not validating the device challenge token, and so a fake one could take its place. My guess would be that Google may have patched this issue, but that's speculative and unverified.

[nikwilliamson]

@AngeloD2022 any ideas on another solution to get the token?

[AngeloD2022]

@nikwilliamson Worst case scenario: I will have to completely reverse engineer the challenge completion process. I am still investigating the issue.

[nikwilliamson]

@nikwilliamson Worst case scenario: I will have to completely reverse engineer the challenge completion process. I am still investigating the issue.

In the mean time – do you know if there is a way to get a working refresh token from a google dev account?

[AngeloD2022]

Okay, well... Unfortunately, it was the worst-case scenario. This is a big headache.

[AngeloD2022]

@nikwilliamson Worst case scenario: I will have to completely reverse engineer the challenge completion process. I am still investigating the issue.

In the mean time – do you know if there is a way to get a working refresh token from a google dev account?

To answer your question, no. Currently, there is no other way of obtaining a token besides proxying the traffic sent by the iOS app and recording the refresh token.

[banool]

Do you have a guide for doing this by chance? I suppose without the token there is no way to use the Google Wifi API?

[r3pwn]

Okay, well... Unfortunately, it was the worst-case scenario. This is a big headache.

Headache resolved :)

[olivernybroe]

Thanks for the fix! I just tested as I needed it and it worked perfectly :)
The chrome store extension is not updated, so had to do it manually.