Bug 421649

Summary:	Google Photos upload/export fails when Google Advanced Protection is enabled
Product:	[Applications] digikam	Reporter:	Gus Gustafson <efelthauser>
Component:	Plugin-WebService-Google	Assignee:	Digikam Developers <digikam-bugs-null>
Status:	REPORTED ---
Severity:	normal	CC:	caulier.gilles, metzpinguin
Priority:	NOR
Version First Reported In:	5.9.0
Target Milestone:	---
Platform:	Other
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description Gus Gustafson 2020-05-16 21:10:18 UTC

SUMMARY
When a Google account has Google Advanced Protection Program (GAPP) enabled, one cannot authorize KIPI plugins... Please make KIPI Plugins work with GAPP program enabled. I do use other 3rd party apps that have managed to get approved by Google for use with GAPP.

STEPS TO REPRODUCE
1. Enable Google Advanced Protection program on your google account.
2. Try to use Kipi Plugins to upload to Google Photos.

OBSERVED RESULT
Receive Authorization Error from Google:
Error 400: policy_enforced
Google cannot give this app access to your account data because Advanced Protection is turned on for your Google Account.

EXPECTED RESULT
Be able to authorize Kipi Plugins.

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: Kubuntu 20.04
(available in About System)
KDE Plasma Version: 5.18.4
KDE Frameworks Version: 5.68.0
Qt Version: 5.12.8

ADDITIONAL INFORMATION

Comment 1 Maik Qualmann 2020-05-16 21:46:36 UTC

I haven't tested it with Google Advanced Protection yet. But digiKam-5.9.0 can no longer connect to Google Photo anyway. Please test the digikam-7.0.0-RC AppImage from here:

https://files.kde.org/digikam/

Maik

Comment 2 Gus Gustafson 2020-05-16 22:02:40 UTC

Hi Maik,
Actually, the 5.9.0 I mentioned was what I saw for the KIPI plugin version that comes on Kubuntu 20.04. (Alternatively, I see 4:19.12.3.)
But the *digikam* version I am using is 6.4.0. Is Google Photos supposed to work with digikam 6.4.0?
Thanks,
Gus

Comment 3 Maik Qualmann 2020-05-16 22:14:08 UTC

If I read through the conditions for Google Advanced Protection, that basically only Google own apps and possibly "selected" apps are granted access, I don't think that digiKam has a chance to belong to these "selected" apps. This protection serves for journalists and people who could be exposed to increased attacks.

Maik

Comment 4 Maik Qualmann 2020-05-16 22:21:32 UTC

For digiKam, this authorization is out of scope. For a normal account, digiKam-6.4.0 is currently the minimum.

Maik

Comment 5 Gus Gustafson 2020-05-16 22:45:54 UTC

There are many 3rd party apps that can be approved to work with GAPP. At least, as Add-Ons, such as the "DocHub - PDF Sign and Edit" Drive Add-on, offered by MacroPlant LLC. (Another example is the "Xodo PDF Reader & Annotator".) I think one criteria is that you must only request access to "View and manage Google Drive files and folders that you have opened or created with this app". You cannot request access to ALL files in the user's google account... Maybe there are similar options for Google Photos?

Perhaps you could speak with support@macroplant.com to see how they were able to get approved?

Comment 6 caulier.gilles 2023-05-07 08:32:24 UTC

Git commit f7b2ec00a5866ab28ace6bfb31ef86983bc6951f by Gilles Caulier.
Committed on 07/05/2023 at 08:31.
Pushed by cgilles into branch 'master'.

digiKam Online documentation: add note about GAPP support for GPhoto and GDrive tools.

M  +4    -0    export_tools/google_export.rst

https://invent.kde.org/documentation/digikam-doc/commit/f7b2ec00a5866ab28ace6bfb31ef86983bc6951f