question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Is there support for Google OAuth 2.0 ?

See original GitHub issue

Hi there, recently we received an email from Google at work saying that one of the apps we develop may be blocked from signing in because Google is making an effort to block sign in from inside embedded browsers.

image

Our app uses react-native-webview to render a web page that has html form to login using email and password or social login with Google and others

Here is the link that came in the email https://developers.googleblog.com/2020/08/guidance-for-our-effort-to-block-less-secure-browser-and-apps.html

And here is the key point from that link

If you're an app developer and use CEF or other clients for authorization on devices, 
use browser-based OAuth 2.0 flows. 
Alternatively, you can use a compatible full native browser for sign-in.

For limited-input device applications, such as applications that do not have access to 
a browser or have limited input capabilities, use limited-input device OAuth 2.0 flows.

I’m gathering information about this and I wonder if you guys can help me understand if react-native-webview qualifies as one of the cases that will be blocked by Google in their security efforts

Here are two more links that may be helpful understanding Google’s pre requisites https://developers.google.com/identity/protocols/oauth2/native-app https://security.googleblog.com/2018/10/announcing-some-security-treats-to.html

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Reactions:2
  • Comments:17

github_iconTop GitHub Comments

1reaction
CaptainJeffcommented, Dec 8, 2020

I’m interested in the same question. Did you figure anything out @gabriel-tentaculo ?

0reactions
github-actions[bot]commented, Apr 11, 2021

Hello 👋, this issue has been opened for more than 2 months with no activity on it. If the issue is still here, please keep in mind that we need community support and help to fix it! Just comment something like still searching for solutions and if you found one, please open a pull request! You have 7 days until this gets closed automatically

Read more comments on GitHub >

github_iconTop Results From Across the Web

Using OAuth 2.0 for Server to Server Applications | Authorization
The Google OAuth 2.0 system supports server-to-server interactions such as those between a web application and a Google service. For this scenario you...
Read more >
Setting up OAuth 2.0 - API Console Help - Google Support
Go to the API Console. · From the projects list, select a project or create a new one. · If the APIs &...
Read more >
Signing in with Google - OAuth 2.0 Simplified
A simple way is for the API to provide a “user info” endpoint which will return the authenticated user's name and other profile...
Read more >
OAuth 2.0 | google-api-python-client
OAuth 2.0 is the authorization protocol used by Google APIs. It is summarized on the Authentication page of this library's documentation, and there...
Read more >
Upcoming security changes to Google's OAuth 2.0 ...
As part of that work, we recently introduced a new secure browser policy prohibiting Google OAuth requests in embedded browser libraries ...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found