-
Notifications
You must be signed in to change notification settings - Fork 284
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
email from Google: [Action Required] Migrate your OAuth out-of-band flow to an alternative method before Oct. 3, 2022 #361
Comments
Got the same message, would also be interested to know what to change. gmvault has been running without issues for me for years, so it would be great to be able to continue to use it. |
I'm pretty sure that means that if your OAuth consent screen Publishing status is Of note: if you created your OAuth consent screen a long time ago, I think 7+ years ago, then your consent screen publishing status might be Also: this change only affects new authorization requests; if you already authorized Gmvault, and don't need to re-authorize it, then you won't be affected. |
@gboudreau Thanks for the answer, I've checked in my account and you are correct it was |
Of note : I think in Testing, your authorizations are only valid for 7 days, but there is a workaround:
(ref) |
So this would only impact new GMvault users that aren't already authenticated? If that is the case, then we'll just need to figure out a way for newcomers to authenticate. |
In doing so you will again be affected by the deprecated OAuth out-of-band (OOB) flow. So it seems there's either having to renew the token every 7 days or using password instead of oauth? |
Using a password is not straightforward either because earlier this month, Google blocked support for using your password to log in to IMAP or SMTP. The only way to use IMAP or SMTP now is to enable 2FA for your account and generate an app password. |
I could live with an app password. What's the reason that the login with password is referred to as (not recommended) in the documentation? |
It's probably not recommended because your password is stored in plaintext. |
In case it helps someone, here are the steps to re-auth using a non-deprecated flow (Loopback for desktop app). This assumes you've already configured your own OAuth flow for authorisation via the Google API Console.
|
@cheesionz I want to use this method, but the Update: I forgot about the |
Hi folks, this is a elegant solution i found that worked for me, Hope it helps. |
@cheesionz dont know if your still active in these parts but I am trying to set up a new instance of gmvault using a docker image and get the forbidden out of band error for authorization after setting up the api etc Where does the python web server code have to be run from. A linux environment? Can you be a little more detailed about running the python webserver. In the end I would like to get it running back in the docker container, so would it be possible to transfer the credentials or default config to the container. |
@dasb00ter the server needs to run wherever you're running GMVault as it uses localhost as the address. Can be any platform that supports Python I believe. You just need a version of Python installed and then run (assuming Python is on the path):
That said, without a UI to show the web page you'd need to modify the Python script to print the code to the console. |
Given that could I install a python environment in Linux/Windows authenticate and move the files into the docker environment from the same network |
@dasb00ter could work, not sure if there is anything machine specific in the oauth file. Someone else will have a better idea than me on it, but easy to try! |
Anybody know exactly what files would need to be moved? Once Auth is achieved |
@dasb00ter I think it would just be the *.oauth2 file in the .gmvault directory of the user. Here's a node/express script based off the python above that worked for me (different port number):
|
Thanks are u running from linux. I tried to setup a python environment(2.7) in windows and I couldn't get gmvault to run after pip install. Idk must have been a pathing issue as it seemed to install correctly. I haven't had time to fiddle with it and I am wondering if I should just spin up a linux VM |
This was on windows. If you're not familiar with express you can follow this quick start, and just replace the above snippet for the hello world example on page 2: https://expressjs.com/en/starter/installing.html Not sure why gmvault wouldn't run after a pip install... |
I just installed Gmvault (in fact, I created a new Chocolatey package for v1.9.1 even). Has this been fixed? |
The Python/Node scripts above don't appear to be necessary (for me, at least). I set This can save a bit of time in scenarios where it's not straightforward to run and access a web server, e.g. my Synology NAS. |
I confirm that this
I confirm that this workaround still works in Apr 2024. |
received this..
any ideas what we should change in order to keep gmvault working?
In .conf there is a line that refers to oob
# Hardcoded dummy redirect URI for non-web apps.
redirect_uri=urn:ietf:wg:oauth:2.0:oob
email:
The text was updated successfully, but these errors were encountered: