Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Migrate OAuth out-of-band flow to an alternative method #13360

Closed
dkocher opened this issue May 5, 2022 · 0 comments · Fixed by #13366
Closed

Migrate OAuth out-of-band flow to an alternative method #13360

dkocher opened this issue May 5, 2022 · 0 comments · Fixed by #13366
Assignees
@dkocher
Labels
googledrive Google Drive Protocol Implementation googlestorage Google Cloud Storage Protocol Implementation
Milestone
8.4.0

Comments

@dkocher
Copy link
Contributor

dkocher commented May 5, 2022

We are writing to inform you that OAuth out-of-band (OOB) flow will be
deprecated on October 3, 2022, to protect users from phishing and app
impersonation attacks.

What do I need to know?

Starting October 3, 2022, we will block OOB requests to Google's OAuth 2.0
authorization endpoint for existing clients. Apps using OOB in testing mode
will not be affected. However, we strongly recommend you to migrate them to
safer methods as these apps will be immediately blocked when switching to
in production status.

Note: New OOB usage has already been disallowed since February 28, 2022.

Below are key dates for compliance

September 5, 2022: A user-facing warning message may be displayed to
non-compliant OAuth requests
October 3, 2022: The OOB flow is blocked for all clients and users will see
the error page.
@dkocher dkocher added googledrive Google Drive Protocol Implementation googlestorage Google Cloud Storage Protocol Implementation labels May 5, 2022
@dkocher dkocher added this to the 8.4.0 milestone May 5, 2022
@dkocher dkocher self-assigned this May 5, 2022
@dkocher dkocher linked a pull request May 6, 2022 that will close this issue
New OAuth registration for Google services #13366
Merged
dkocher added a commit that referenced this issue May 6, 2022
@dkocher
Merge pull request #13366 from iterate-ch/feature/GH-13360
17fcba0 
New OAuth registration for Google services
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@dkocher dkocher

Labels
googledrive Google Drive Protocol Implementation googlestorage Google Cloud Storage Protocol Implementation
Projects
None yet
Milestone
8.4.0
Development

Successfully merging a pull request may close this issue.

New OAuth registration for Google services iterate-ch/cyberduck
1 participant
@dkocher