GNU bug report logs - #54913
OAuth2 ELPA package: out-of-band authentication deprecated

Previous Next

Package: emacs;

Reported by: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>

Date: Wed, 13 Apr 2022 15:31:02 UTC

Severity: normal

To reply to this bug, email your comments to 54913 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-gnu-emacs <at> gnu.org:
bug#54913; Package emacs. (Wed, 13 Apr 2022 15:31:02 GMT) Full text and rfc822 format available.

Acknowledgement sent to Adrià Garriga-Alonso <adria.garriga <at> gmail.com>:
New bug report received and forwarded. Copy sent to bug-gnu-emacs <at> gnu.org. (Wed, 13 Apr 2022 15:31:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>
To: bug-gnu-emacs <at> gnu.org
Subject: OAuth2 ELPA package: out-of-band authentication deprecated
Date: Wed, 13 Apr 2022 10:14:17 +0200
[Message part 1 (text/plain, inline)]
This report concerns the [oauth2 package on ELPA]. Hope that’s OK. It affects
downstream users of it such as `org-gcal' and `org-caldav'.

The authentication scheme used by `oauth2' has been deprecated by Google
services. I have a patch to update to the newer, recommended way. The OAuth2
maintainer said it would be a good addition, but I should find someone on ELPA
that is happy to review it in order to contribute.

Is there someone willing to review and merge a potential patch?


More details:

The current authentication scheme is out-of-band authentication; a code is
displayed in the browser and the user copies it into Emacs. The new scheme
involves spinning up an (extremely simple) HTTP server on Emacs to handle a
redirect in the browser.

I have an [implementation of the HTTP authentication handler], and emailed Julien
Danjou (the `oauth2' maintainer) about it. Julien said it would be a good
incorporation to the package but they don’t have time to review it.


Thank you for your time.

Adrià Garriga-Alonso


[oauth2 package on ELPA] <https://elpa.gnu.org/packages/oauth2.html>

[implementation of the HTTP authentication handler] <https://github.com/rhaps0dy/emacs-oauth2-auto/>
[Message part 2 (text/html, inline)]

Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#54913; Package emacs. (Thu, 14 Apr 2022 01:17:02 GMT) Full text and rfc822 format available.

Message #8 received at 54913 <at> debbugs.gnu.org (full text, mbox):

From: Lars Ingebrigtsen <larsi <at> gnus.org>
To: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>
Cc: 54913 <at> debbugs.gnu.org
Subject: Re: bug#54913: OAuth2 ELPA package: out-of-band authentication
 deprecated
Date: Thu, 14 Apr 2022 03:16:41 +0200
Adrià Garriga-Alonso <adria.garriga <at> gmail.com> writes:

> Is there someone willing to review and merge a potential patch? 

Sure, patches are welcome.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no




Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#54913; Package emacs. (Wed, 13 Sep 2023 01:48:02 GMT) Full text and rfc822 format available.

Message #11 received at 54913 <at> debbugs.gnu.org (full text, mbox):

From: Stefan Kangas <stefankangas <at> gmail.com>
To: Lars Ingebrigtsen <larsi <at> gnus.org>
Cc: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>,
 54913 <at> debbugs.gnu.org
Subject: Re: bug#54913: OAuth2 ELPA package: out-of-band authentication
 deprecated
Date: Tue, 12 Sep 2023 18:47:34 -0700
Lars Ingebrigtsen <larsi <at> gnus.org> writes:

> Adrià Garriga-Alonso <adria.garriga <at> gmail.com> writes:
>
>> Is there someone willing to review and merge a potential patch?
>
> Sure, patches are welcome.

Ping.  Did you make any progress with this?




Information forwarded to bug-gnu-emacs <at> gnu.org:
bug#54913; Package emacs. (Wed, 13 Sep 2023 16:36:02 GMT) Full text and rfc822 format available.

Message #14 received at 54913 <at> debbugs.gnu.org (full text, mbox):

From: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>
To: Stefan Kangas <stefankangas <at> gmail.com>
Cc: 54913 <at> debbugs.gnu.org
Subject: Re: bug#54913: OAuth2 ELPA package: out-of-band authentication
 deprecated
Date: Wed, 13 Sep 2023 09:26:02 -0700
[Message part 1 (text/plain, inline)]
Hi,

> On Sep 12, 2023, at 18:47, Stefan Kangas <stefankangas <at> gmail.com> wrote:
> 
> Ping.  Did you make any progress with this?

No, I completely forgot. I also don’t use oauth2 on Emacs anymore. org-gcal.el https://github.com/telotortium/org-gcal.el migrated to use the library I wrote (oauth2-auto https://github.com/telotortium/emacs-oauth2-auto), and I transferred that library to the maintainer of org-gcal.el, Robert Irelan. I don’t know what happened to org-caldav.

I’m happy to help review a patch, but have no time to make it myself.

All the best,
Adrià
[Message part 2 (text/html, inline)]

This bug report was last modified 1 year and 277 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.