Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
Bug#1025729: evolution-data-server: Gmail OAuth2: "Access blocked: GNOME Evolution’s request is invalid"
870 views
Skip to first unread message
James Taylor
Dec 7, 2022, 10:50:03 PM12/7/22
to
Package: evolution-data-server
Version: 3.30.5-1+deb10u2
Severity: important
Dear Maintainer,
Google deprecated a type of OAuth flow in Feb 28, 2022. This was fixed and addressed upstream
shortly after at https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/388 and
the fix was included in version 3.44.2. However, Google has recently begun blocking
the old format. My Oauth2 token expired December 7th, 2022 so I can no longer access
my gmail account from evolution. A suitably recent version is available in Testing.
But the software is now partially unusable for the stable releases. I hope this is the
right channel for this. I wanted to note this upstream bug down here so you are aware
of the need to include the fixes in stable and oldstable.
Reproducing: Attempt to log in to a gmail account using OAuth2
-- System Information:
Debian Release: 10.13
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-22-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages evolution-data-server depends on:
ii evolution-data-server-common 3.30.5-1+deb10u2
ii gnome-keyring 3.28.2-5
ii libc6 2.28-10+deb10u2
ii libcamel-1.2-62 3.30.5-1+deb10u2
ii libcanberra-gtk3-0 0.30-7
ii libcanberra0 0.30-7
ii libdb5.3 5.3.28+dfsg1-0.5
ii libebackend-1.2-10 3.30.5-1+deb10u2
ii libebook-1.2-19 3.30.5-1+deb10u2
ii libebook-contacts-1.2-2 3.30.5-1+deb10u2
ii libecal-1.2-19 3.30.5-1+deb10u2
ii libedata-book-1.2-25 3.30.5-1+deb10u2
ii libedata-cal-1.2-29 3.30.5-1+deb10u2
ii libedataserver-1.2-23 3.30.5-1+deb10u2
ii libedataserverui-1.2-2 3.30.5-1+deb10u2
ii libgcr-base-3-1 3.28.1-1
ii libgcr-ui-3-1 3.28.1-1
ii libgdata22 0.17.9-3
ii libglib2.0-0 2.58.3-2+deb10u4
ii libgoa-1.0-0b 3.30.1-2
ii libgtk-3-0 3.24.5-1
ii libgweather-3-15 3.28.2-2
ii libical3 3.0.4-3
ii libldap-2.4-2 2.4.47+dfsg-3+deb10u7
ii libpango-1.0-0 1.42.4-8~deb10u1
ii libsecret-1-0 0.18.7-1
ii libsoup2.4-1 2.64.2-2
ii libxml2 2.9.4+dfsg1-7+deb10u5
evolution-data-server recommends no packages.
Versions of packages evolution-data-server suggests:
ii evolution 3.30.5-1.1
-- no debconf information
Version: 3.30.5-1+deb10u2
Severity: important
Dear Maintainer,
Google deprecated a type of OAuth flow in Feb 28, 2022. This was fixed and addressed upstream
shortly after at https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/388 and
the fix was included in version 3.44.2. However, Google has recently begun blocking
the old format. My Oauth2 token expired December 7th, 2022 so I can no longer access
my gmail account from evolution. A suitably recent version is available in Testing.
But the software is now partially unusable for the stable releases. I hope this is the
right channel for this. I wanted to note this upstream bug down here so you are aware
of the need to include the fixes in stable and oldstable.
Reproducing: Attempt to log in to a gmail account using OAuth2
-- System Information:
Debian Release: 10.13
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.19.0-22-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages evolution-data-server depends on:
ii evolution-data-server-common 3.30.5-1+deb10u2
ii gnome-keyring 3.28.2-5
ii libc6 2.28-10+deb10u2
ii libcamel-1.2-62 3.30.5-1+deb10u2
ii libcanberra-gtk3-0 0.30-7
ii libcanberra0 0.30-7
ii libdb5.3 5.3.28+dfsg1-0.5
ii libebackend-1.2-10 3.30.5-1+deb10u2
ii libebook-1.2-19 3.30.5-1+deb10u2
ii libebook-contacts-1.2-2 3.30.5-1+deb10u2
ii libecal-1.2-19 3.30.5-1+deb10u2
ii libedata-book-1.2-25 3.30.5-1+deb10u2
ii libedata-cal-1.2-29 3.30.5-1+deb10u2
ii libedataserver-1.2-23 3.30.5-1+deb10u2
ii libedataserverui-1.2-2 3.30.5-1+deb10u2
ii libgcr-base-3-1 3.28.1-1
ii libgcr-ui-3-1 3.28.1-1
ii libgdata22 0.17.9-3
ii libglib2.0-0 2.58.3-2+deb10u4
ii libgoa-1.0-0b 3.30.1-2
ii libgtk-3-0 3.24.5-1
ii libgweather-3-15 3.28.2-2
ii libical3 3.0.4-3
ii libldap-2.4-2 2.4.47+dfsg-3+deb10u7
ii libpango-1.0-0 1.42.4-8~deb10u1
ii libsecret-1-0 0.18.7-1
ii libsoup2.4-1 2.64.2-2
ii libxml2 2.9.4+dfsg1-7+deb10u5
evolution-data-server recommends no packages.
Versions of packages evolution-data-server suggests:
ii evolution 3.30.5-1.1
-- no debconf information
Jeremy Bicha
Dec 8, 2022, 3:30:04 PM12/8/22
to
On Wed, Dec 7, 2022 at 10:48 PM James Taylor <somebo...@yahoo.com> wrote:
> Package: evolution-data-server
> Version: 3.30.5-1+deb10u2
> Severity: important
>
> Dear Maintainer,
>
> Google deprecated a type of OAuth flow in Feb 28, 2022. This was fixed and addressed upstream
> shortly after at https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/388 and
> the fix was included in version 3.44.2. However, Google has recently begun blocking
> the old format. My Oauth2 token expired December 7th, 2022 so I can no longer access
> my gmail account from evolution. A suitably recent version is available in Testing.
Debian 10 has reached end of life for standard support. Please upgrade
> Package: evolution-data-server
> Version: 3.30.5-1+deb10u2
> Severity: important
>
> Dear Maintainer,
>
> Google deprecated a type of OAuth flow in Feb 28, 2022. This was fixed and addressed upstream
> shortly after at https://gitlab.gnome.org/GNOME/evolution-data-server/-/issues/388 and
> the fix was included in version 3.44.2. However, Google has recently begun blocking
> the old format. My Oauth2 token expired December 7th, 2022 so I can no longer access
> my gmail account from evolution. A suitably recent version is available in Testing.
to Debian 11.
I was able to successfully log into a Google account today using
Debian 11 using GNOME Settings > Online Accounts.
Could you provide detailed steps for how to reproduce this bug from a
clean Debian 11 install?
Thank you,
Jeremy Bicha
Jeremy Bicha
Dec 9, 2022, 9:20:04 AM12/9/22
to
On Thu, Dec 8, 2022 at 9:11 PM Full Name <somebo...@yahoo.com> wrote:
> To reproduce for an existing account that hasn't yet been blocked, I
> think revoking Evolution from third party app access should do the
> trick:
>
> 1. Login to google
> 2. Go to https://myaccount.google.com/permissions?pli=1
> 3. Under GNOME Evolution, Remove Access
> 4. Attempt to login using Evolution
Instead of using Evolution to log in, use GNOME Online Accounts.
Open the GNOME Settings app.
In the sidebar, click Online Accounts
Click Add an account > Google
Log in here.
After you log in, open Evolution.
Thank you,
Jeremy Bicha
> To reproduce for an existing account that hasn't yet been blocked, I
> think revoking Evolution from third party app access should do the
> trick:
>
> 1. Login to google
> 2. Go to https://myaccount.google.com/permissions?pli=1
> 3. Under GNOME Evolution, Remove Access
> 4. Attempt to login using Evolution
Instead of using Evolution to log in, use GNOME Online Accounts.
Open the GNOME Settings app.
In the sidebar, click Online Accounts
Click Add an account > Google
Log in here.
After you log in, open Evolution.
Thank you,
Jeremy Bicha
0 new messages