Google blocks access from dolphin/kio-gdrive

Help
1

Hello,

Trying to access google drive from dolphin (arch linux). After entering google account password and confirming on my cellphone, an error message is displayed:

This app is blocked
This app tried to access sensitive info in your Google Account. To keep your account safe, Google blocked this access.

Any clue on how to fix this?

TIA

2 Likes
2

Hi - there’s an existing thread on this topic where someone has figured out a temporary workaround:

And an existing bug report for the topic: 480779 – Can not add Google to Online Accounts anymore using a recent version of signon-ui

Basically, looks like a new client ID will need to be figured out to be used by Plasma’s Online Accounts feature going forward, but there are workarounds possible in the meantime if needed.

Hope that helps,

1 Like
3

Took some time but there’s a solution. In the file:

/usr/share/accounts/providers/kde/google.provider

the line:

<setting name="AuthPath">o/oauth2/auth?access_type=offline</setting>

Should be replaced with:

<setting name="AuthPath">o/oauth2/auth?access_type=offline&amp;approval_prompt=force</setting>

Found this on redit under r/kde but can’t post the link here.

HTH

1 Like
4

Hi, mine is exactly like this by default, but it still blocks me from login.

5

This is the new file I use:

<?xml version="1.0" encoding="UTF-8"?>
<provider id="google">
  <name>Google</name>

  <description>GNOME-ID, Google Drive and YouTube</description>
  <icon>im-google</icon>
  <translations>kaccounts-providers</translations>
  <domains>.*google\.com</domains>

  <template>
    <group name="auth">
      <setting name="method">oauth2</setting>
      <setting name="mechanism">web_server</setting>
      <group name="oauth2">
        <group name="web_server">
          <setting name="Host">accounts.google.com</setting>
          <setting name="AuthPath">o/oauth2/auth?access_type=offline</setting>
          <setting name="TokenPath">o/oauth2/token</setting>
          <setting name="RedirectUri">http://localhost/oauth2callback</setting>

          <setting name="ResponseType">code</setting>
          <setting type="as" name="Scope">[
              'https://www.googleapis.com/auth/userinfo.email',
              'https://www.googleapis.com/auth/userinfo.profile',
              'https://www.googleapis.com/auth/calendar',
              'https://www.googleapis.com/auth/tasks',
              'https://www.googleapis.com/auth/drive'
          ]</setting>
          <setting type="as" name="AllowedSchemes">['https']</setting>
          <setting name="ClientId">44438659992-7kgjeitenc16ssihbtdjbgguch7ju55s.apps.googleusercontent.com</setting>
          <setting name="ClientSecret">-gMLuQyDiI0XrQS_vx_mhuYF</setting>
          <setting type="b" name="ForceClientAuthViaRequestBody">true</setting>
        </group>
      </group>
    </group>
  </template>
</provider>
2 Likes
6

This is the reddit post:

https://www.reddit.com/r/kde/comments/1hq9x5o/temporary_workaround_for_google_online_accounts/
7

At this time, the relevant information on the issue of Google Drive integration in KDE products is in these bug report comments:

8

Thats my Reddit Post lol.

1 Like
9

After the latest update in manjaro plasma, kio-gdrive 24.12.2-1 i can make an online account with google. But still no access to gdrive in dolphin. Acces denied warning

10

Hi - Drive access is no longer requested by the KDE Online Accounts function when signing in to a Google account. Quoting from the commit message included in bug report comment 54, linked above:

Google blocked us from using this back in June because we weren’t able
justify our API usage to their satisfaction. As such, the permission is
now blocked, and including it here prevents people from logging into
their Google accounts for any other purposes, making 25% of the
KAccounts KCM non-functional. Remove the gdrive permissions for now so at least other Google things can work (at least in theory).

11

Hi, new here, have the same issue and have tried the various ‘fixes’ in this thread. With your last reply in mind is there any other workaround, fix or solution? Is this something that is planning to be fixed?

12

Hi! The solution would be for someone to volunteer to take care of the tasks laid out by Nate in comment #52 of the bug report: 480779 – Can not add Google to Online Accounts anymore using a recent version of signon-ui

13

My UNIX/GNU/Linux operating system distributions (Slackware GNU/Linux, classic *BSD UNIX) have no /usr/share/accounts/providers/kde; can people document general cases, not just unconventional new ones?

14

As the discussion has outlined, there is currently not solution other than getting kio_gdrive re-authorized.

Then it won’t matter which path your distribution stores things at.

15

Not a technical solution, Kevin :wink: .

This may seem radical, but it really isn’t: stop using and relying on Google services. You may think “HOW IS THIS EVEN POSSIBLE. You’d have to be an exile wearing a potato sack and living in a cave to carry on like that”. But just ask yourself how many of you folks still use Facebook Messenger, a service that claimed 1.3 billion users at its height in November 2020.

Exactly.

2 Likes
16

Limitation of my developer brain :wink:

1 Like