reddit / emacs

Continuing with org-gcal after Google deprecates OAuth authorization?

nonreligious · 2022-06-02 19:12
I've been using `org-gcal` for a couple of years with few if any problems. I believe I set it up using OAuth authorization, with a token. It looks like OAuth support is being deprecated by Google -- see this email I got from a month ago: >We are writing to inform you that OAuth out-of-band (OOB) flow will be deprecated on October 3, 2022, to protect users from phishing and app impersonation attacks. > >What do I need to know? > >Starting October 3, 2022, we will block OOB requests to Google's OAuth 2.0 authorization endpoint for existing clients. Apps using OOB in testing mode will not be affected. However, we strongly recommend you to migrate them to safer methods as these apps will be immediately blocked when switching to in production status. > >Note: New OOB usage has already been disallowed since February 28, 2022. > >Below are key dates for compliance > >September 5, 2022: A user-facing warning message may be displayed to >non-compliant OAuth requests >October 3, 2022: The OOB flow is blocked for all clients and users will see >the error page. In fact, I've been getting an error saying `OAuth token expired. Now trying to refresh-token. Received HTTP 401` for a couple of months now, so this tracks. Is there anything to be done at this point? `org-gcal` still works for me at the moment, but I'm guessing it won't come October. The [maintainer's github page](https://github.com/kidd/org-gcal.el) (at least that's who I think is the maintainer) doesn't mention this issue at the moment though.
ahyatt · 2022-06-02 21:59
This is a problem affecting a lot of various projects, and there are people looking into working with Google to find a solution. So stay tuned, I hope there will be either a policy fix or an easy code fix upcoming.
nonreligious · 2022-06-03 05:05
Thanks! I should have guessed that Google changing a major authentication method for its various APIs would be a big deal, though I'm surprised not to have encountered more news about it. Hope it gets resolved soon!
edumerco · 2022-06-03 10:54
If you can, switch to any open, non proprietary solution. Nextcloud works perfectly for calendar, agenda and files (at least I'm my experience, but I'm not an expert). :)
nonreligious · 2022-06-03 13:37
Thanks - I've been thinking about using Nextcloud as a personal server for other reasons. I currently sync things using a combination Dropbox and Github (though not together). I saved [this post](https://www.reddit.com/r/orgmode/comments/gemkhw/back_up_the_org_treasue/) from a couple of years ago, but do you have a use-case/setup you wouldn't mind sharing?
edumerco · 2022-06-06 18:44
Not much, and it's not even too integrated with emacs. It worked, then something broke and I didn't even fixed it yet. But org-caldav (https://github.com/dengste/org-caldav) works perfectly with Nextcloud. :) Best...
ExistingProgram3883 · 2022-09-04 06:21
Are there any news on this? Did you find a solution, u/nonreligious?
nonreligious · 2022-09-04 08:12
As far as I can tell, there hasn't been any change yet, but there is an open issue [on github](https://github.com/kidd/org-gcal.el/issues/191) detailing the problem, and [an unmerged pull request](https://github.com/kidd/org-gcal.el/pull/200) where the fix is switching `oauth2-auto`. I've been checking on their progress over the last month or so, and haven't seen much movement. Hopefully they approve the fix soon.