GNU bug report logs - #54913
OAuth2 ELPA package: out-of-band authentication deprecated

Previous Next

Full log

View this message in rfc822 format

From: Adrià Garriga-Alonso <adria.garriga <at> gmail.com>
To: 54913 <at> debbugs.gnu.org
Subject: bug#54913: OAuth2 ELPA package: out-of-band authentication deprecated
Date: Wed, 13 Apr 2022 10:14:17 +0200

[Message part 1 (text/plain, inline)]

This report concerns the [oauth2 package on ELPA]. Hope that’s OK. It affects
downstream users of it such as `org-gcal' and `org-caldav'.

The authentication scheme used by `oauth2' has been deprecated by Google
services. I have a patch to update to the newer, recommended way. The OAuth2
maintainer said it would be a good addition, but I should find someone on ELPA
that is happy to review it in order to contribute.

Is there someone willing to review and merge a potential patch?


More details:

The current authentication scheme is out-of-band authentication; a code is
displayed in the browser and the user copies it into Emacs. The new scheme
involves spinning up an (extremely simple) HTTP server on Emacs to handle a
redirect in the browser.

I have an [implementation of the HTTP authentication handler], and emailed Julien
Danjou (the `oauth2' maintainer) about it. Julien said it would be a good
incorporation to the package but they don’t have time to review it.


Thank you for your time.

Adrià Garriga-Alonso


[oauth2 package on ELPA] <https://elpa.gnu.org/packages/oauth2.html>

[implementation of the HTTP authentication handler] <https://github.com/rhaps0dy/emacs-oauth2-auto/>

[Message part 2 (text/html, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.