Adding Feedly support to RSS Guard

[Martin Rotter]

Hello feedly.

I wrote you e-mail about this subject just to be sure this request reaches you.

RSS Guard is quite well-known RSS reader - works on Linux, Mac OS and Windows, is open-source, has some ground-breaking abilites like fully scriptable message filtering, mutli-protocol and multi-account support, around 10 000+ regular users.

Some users requested Feedly support.

https://github.com/martinrotter/rssguard/issues/105 

What is your position on this? Sure, I could implement RSS Guard Feedly plugin around "developer tokens" and force users to manually refresh and re-input them each month, but honestly, it sucks.

I would really like to obtain official client_id, client_secret or be provided with another way of seamless API authentication. Users are waiting for this...

Note that I develop the app for 10 years for free and dedicate all the work for the good of my users.

Have a nice day.

[David Chatenay]

Hi Martin,

We could issue you a client id and secret, provided that it doesn't make its way into the public source code, and is reasonably obfuscated in the binaries (so running strings on the binary doesn't reveal it). This is the model we use with NetNewsWire.

But we cannot issue an API key that gets distributed with source... That's a recipe for abuse (of which we already get quite a lot).

Let us know if this would work for you and your users.

Cheers,

-- 

David Chatenay

Platform Engineer

Feedly

--
You received this message because you are subscribed to the Google Groups "Feedly Cloud" group.
To unsubscribe from this group and stop receiving emails from it, send an email to feedly-cloud...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/feedly-cloud/f1d08754-4706-4550-9be9-4d6c5ce3780fn%40googlegroups.com.

[Martin Rotter]

Hello, David.

I would like to bring up the attention to RSS Guard. I have already released first version with Feedly support - 3.9.0.

https://github.com/martinrotter/rssguard/releases/tag/3.9.0

Also, I just finalized the process for including production tokens into the binary. They are infused into the binary in encrypted form which is moreover hidden in Github Actions as seen in

https://github.com/martinrotter/rssguard/runs/2003810412

Display the page and search for phrase "GMAIL_CLIENT_ID" (this variable is encrypted the same way as your tokens will be). Only and only encrypted form of token is placed inside the binary and they are decrypted in the runtime with fixed key. So the attacker would have to get the binary, specifically find the encrypted string within the binary, browse source code, extract the key and then decrypt. Not the best of buck security but good enough I think.

I work on brand new major RSS Guard version which will make the Feedly plugin even simpler to use and I would really like to include production tokens aswell.

If you feel that the app is not good enough, then let me know in any case so that I can concentrate my energy elsewhere. :) Thank you and have a nice day in these hard times.

Dne středa 3. února 2021 v 9:49:50 UTC+1 uživatel david napsal: