Re: [gentoo-dev] [News item review] V2 Chromium access to Google services
On 3/8/21 5:19 PM, Thomas Deutschmann wrote: Hi, On 2021-03-08 20:01, Stephan Hartmann wrote: Starting March 15th, 2021 Google Chrome Team will restrict access to Google APIs and services that are reserved for Google use only. This means that users are no longer able to login into their Google Accounts which disables access to for example Chrome Sync. Maybe outline that this will only affect browser functions. You can still log in into your Google Account when accessing https://accounts.google.com/. As a consequence we have to remove Client ID and secret from all www-client/chromium ebuilds. This change has already been done for =www-client/chromium-89.0.4389.82. Other versions will be updated shortly. My first reaction was: WTF?! Why remove... maybe add a reference to [2] already or quote As explained in section above, signing in to Google web is rate limited if the developer has configured a client ID and client secret. To avoid hitting this limit in Chromium Derivatives, please remove the OAuth 2.0 client ID and client secret from your build configuration. directly in the news item. As quantitative feedback helps, I second this! I had the exact same reaction. Aisha That said, I wonder if there's a use case to allow users to bake-in custom credentials. I know at least one large Gentoo setup distributing Firefox to its users with custom keys. This is possible via environment variables set at build time, see https://gitweb.gentoo.org/repo/gentoo.git/tree/www-client/firefox/firefox-86.0.ebuild?id=dfe26277ee7441d00d88da14691cfc48db85ac8a#n453 If you need one of the Google use only APIs, then you either have to switch to www-client/google-chrome{-beta,-unstable} or setup your own keys [1]. Should be www-client/google-chrome{,-beta,-unstable} ^^^ However, the latter is only intended for development. Documentation on how to generate and use own keys can be found in [2]. I wouldn't mention that at all. Either there is suitable way to keep status quo or there isn't. My suggestion: announcement> client_id or client_secret as explained in last paragraph of [2].> environment variable at runtime (and or build-time if you are going to support that) or add reference to [2] again.>
Re: [gentoo-dev] [News item review] V2 Chromium access to Google services
> On 8 Mar 2021, at 19:01, Stephan Hartmann wrote: > > Hi, Hi! Review from mobile so please excuse non-ideal formatting. > > updated based on previous suggestions. > > ``` > Title: Chromium access to Google services > Author: Stephan Hartmann > Content-Type: text/plain > Posted: 2021-03-09 > Revision: 1 > News-Item-Format: 2.0 > Display-If-Installed: www-client/chromium > > Starting March 15th, 2021 Google Chrome Team will restrict access to From March 15th 2021, Google’s Chrome team will be restricting access to... > Google APIs and services that are reserved for Google use only. This > means that users are no longer able to login into users of? > their Google Accounts > which disables access to for example Chrome Sync. > Access to e.g Chrome Sync and ... will be affected. > As a consequence we have to remove Client ID and secret from all > www-client/chromium ebuilds. As a consequence, we must remove both the Client ID and secret(s) from the www-client/chromium ebuilds in Gentoo. > This change has already been done for > =www-client/chromium-89.0.4389.82. This change has already been made for... > Other versions will be updated > shortly. > > If you need one of the Google use only APIs, then you either have to If you need to use one of these Google-only APIs. then you either have to... 1) ... > switch to www-client/google-chrome{-beta,-unstable} Or 2) > setup your own > keys [1]. However, the latter is only intended for development. > Documentation on how to generate and use own keys can be found in [2]. > > [1] > https://groups.google.com/a/chromium.org/g/chromium-dev/c/jgy5pcJ7np8/m/p3j_4b6vBQAJ > [2] https://www.chromium.org/developers/how-tos/api-keys > ``` > > Best regards, > > Stephan >
Re: [gentoo-dev] [News item review] V2 Chromium access to Google services
Hi, On 2021-03-08 20:01, Stephan Hartmann wrote: Starting March 15th, 2021 Google Chrome Team will restrict access to Google APIs and services that are reserved for Google use only. This means that users are no longer able to login into their Google Accounts which disables access to for example Chrome Sync. Maybe outline that this will only affect browser functions. You can still log in into your Google Account when accessing https://accounts.google.com/. As a consequence we have to remove Client ID and secret from all www-client/chromium ebuilds. This change has already been done for =www-client/chromium-89.0.4389.82. Other versions will be updated shortly. My first reaction was: WTF?! Why remove... maybe add a reference to [2] already or quote As explained in section above, signing in to Google web is rate limited if the developer has configured a client ID and client secret. To avoid hitting this limit in Chromium Derivatives, please remove the OAuth 2.0 client ID and client secret from your build configuration. directly in the news item. That said, I wonder if there's a use case to allow users to bake-in custom credentials. I know at least one large Gentoo setup distributing Firefox to its users with custom keys. This is possible via environment variables set at build time, see https://gitweb.gentoo.org/repo/gentoo.git/tree/www-client/firefox/firefox-86.0.ebuild?id=dfe26277ee7441d00d88da14691cfc48db85ac8a#n453 If you need one of the Google use only APIs, then you either have to switch to www-client/google-chrome{-beta,-unstable} or setup your own keys [1]. Should be www-client/google-chrome{,-beta,-unstable} ^^^ However, the latter is only intended for development. Documentation on how to generate and use own keys can be found in [2]. I wouldn't mention that at all. Either there is suitable way to keep status quo or there isn't. My suggestion: announcement> client_id or client_secret as explained in last paragraph of [2].> environment variable at runtime (and or build-time if you are going to support that) or add reference to [2] again.> -- Regards, Thomas Deutschmann / Gentoo Linux Developer fpr: C4DD 695F A713 8F24 2AA1 5638 5849 7EE5 1D5D 74A5 OpenPGP_signature Description: OpenPGP digital signature
Re: [gentoo-dev] [News item review] V2 Chromium access to Google services
Hi, Russian translation follows. Title: Доступ браузера Chromium к сервисам Google Author: Stephan Hartmann Translator: Alexey Sokolov Posted: 2021-03-09 Revision: 1 News-Item-Format: 2.0 Display-If-Installed: www-client/chromium С 15 марта 2021 команда Google Chrome ограничит доступ к Google API и службам, зарезервированным для использования самим Google. Это означает, что пользователи больше не смогут войти в учётную запись Google и потому у них не будет доступа к, например, Chrome Sync. Поэтому нам приходится удалить из www-client/chromium Client ID и ключи. Мы уже удалили их из =www-client/chromium-89.0.4389.82, остальные версии будут обновлены в ближайшем будущем. Если вам нужен доступ к этим API, вам нужно либо перейти на www-client/google-chrome{-beta,-unstable}, либо установить ваши собственные ключи [1], что, однако, предназначено только для разработки. Инструкцию по созданию и использованию собственных ключей можно найти здесь [2]. [1] https://groups.google.com/a/chromium.org/g/chromium-dev/c/jgy5pcJ7np8/m/p3j_4b6vBQAJ [2] https://www.chromium.org/developers/how-tos/api-keys пн, 8 мар. 2021 г. в 19:01, Stephan Hartmann : > > Hi, > > updated based on previous suggestions. > > ``` > Title: Chromium access to Google services > Author: Stephan Hartmann > Content-Type: text/plain > Posted: 2021-03-09 > Revision: 1 > News-Item-Format: 2.0 > Display-If-Installed: www-client/chromium > > Starting March 15th, 2021 Google Chrome Team will restrict access to > Google APIs and services that are reserved for Google use only. This > means that users are no longer able to login into their Google Accounts > which disables access to for example Chrome Sync. > > As a consequence we have to remove Client ID and secret from all > www-client/chromium ebuilds. This change has already been done for > =www-client/chromium-89.0.4389.82. Other versions will be updated > shortly. > > If you need one of the Google use only APIs, then you either have to > switch to www-client/google-chrome{-beta,-unstable} or setup your own > keys [1]. However, the latter is only intended for development. > Documentation on how to generate and use own keys can be found in [2]. > > [1] > https://groups.google.com/a/chromium.org/g/chromium-dev/c/jgy5pcJ7np8/m/p3j_4b6vBQAJ > [2] https://www.chromium.org/developers/how-tos/api-keys > ``` > > Best regards, > > Stephan >
[gentoo-dev] [News item review] V2 Chromium access to Google services
Hi, updated based on previous suggestions. ``` Title: Chromium access to Google services Author: Stephan Hartmann Content-Type: text/plain Posted: 2021-03-09 Revision: 1 News-Item-Format: 2.0 Display-If-Installed: www-client/chromium Starting March 15th, 2021 Google Chrome Team will restrict access to Google APIs and services that are reserved for Google use only. This means that users are no longer able to login into their Google Accounts which disables access to for example Chrome Sync. As a consequence we have to remove Client ID and secret from all www-client/chromium ebuilds. This change has already been done for =www-client/chromium-89.0.4389.82. Other versions will be updated shortly. If you need one of the Google use only APIs, then you either have to switch to www-client/google-chrome{-beta,-unstable} or setup your own keys [1]. However, the latter is only intended for development. Documentation on how to generate and use own keys can be found in [2]. [1] https://groups.google.com/a/chromium.org/g/chromium-dev/c/jgy5pcJ7np8/m/p3j_4b6vBQAJ [2] https://www.chromium.org/developers/how-tos/api-keys ``` Best regards, Stephan