Bug 421649 - Google Photos upload/export fails when Google Advanced Protection is enabled
Summary: Google Photos upload/export fails when Google Advanced Protection is enabled
Status: REPORTED
Alias: None
Product: digikam
Classification: Applications
Component: Plugin-WebService-Google (other bugs)
Version First Reported In: 5.9.0
Platform: Other Linux
: NOR normal
Target Milestone: ---
Assignee: Digikam Developers
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-05-16 21:10 UTC by Gus Gustafson
Modified: 2023-05-07 08:32 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Gus Gustafson 2020-05-16 21:10:18 UTC
SUMMARY
When a Google account has Google Advanced Protection Program (GAPP) enabled, one cannot authorize KIPI plugins... Please make KIPI Plugins work with GAPP program enabled. I do use other 3rd party apps that have managed to get approved by Google for use with GAPP.

STEPS TO REPRODUCE
1. Enable Google Advanced Protection program on your google account.
2. Try to use Kipi Plugins to upload to Google Photos.

OBSERVED RESULT
Receive Authorization Error from Google:
Error 400: policy_enforced
Google cannot give this app access to your account data because Advanced Protection is turned on for your Google Account.

EXPECTED RESULT
Be able to authorize Kipi Plugins.

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: Kubuntu 20.04
(available in About System)
KDE Plasma Version: 5.18.4
KDE Frameworks Version: 5.68.0
Qt Version: 5.12.8

ADDITIONAL INFORMATION
Comment 1 Maik Qualmann 2020-05-16 21:46:36 UTC
I haven't tested it with Google Advanced Protection yet. But digiKam-5.9.0 can no longer connect to Google Photo anyway. Please test the digikam-7.0.0-RC AppImage from here:

https://files.kde.org/digikam/

Maik
Comment 2 Gus Gustafson 2020-05-16 22:02:40 UTC
Hi Maik,
Actually, the 5.9.0 I mentioned was what I saw for the KIPI plugin version that comes on Kubuntu 20.04. (Alternatively, I see 4:19.12.3.)
But the *digikam* version I am using is 6.4.0. Is Google Photos supposed to work with digikam 6.4.0?
Thanks,
Gus
Comment 3 Maik Qualmann 2020-05-16 22:14:08 UTC
If I read through the conditions for Google Advanced Protection, that basically only Google own apps and possibly "selected" apps are granted access, I don't think that digiKam has a chance to belong to these "selected" apps. This protection serves for journalists and people who could be exposed to increased attacks.

Maik
Comment 4 Maik Qualmann 2020-05-16 22:21:32 UTC
For digiKam, this authorization is out of scope. For a normal account, digiKam-6.4.0 is currently the minimum.

Maik
Comment 5 Gus Gustafson 2020-05-16 22:45:54 UTC
There are many 3rd party apps that can be approved to work with GAPP. At least, as Add-Ons, such as the "DocHub - PDF Sign and Edit" Drive Add-on, offered by MacroPlant LLC. (Another example is the "Xodo PDF Reader & Annotator".) I think one criteria is that you must only request access to "View and manage Google Drive files and folders that you have opened or created with this app". You cannot request access to ALL files in the user's google account... Maybe there are similar options for Google Photos?

Perhaps you could speak with support@macroplant.com to see how they were able to get approved?
Comment 6 caulier.gilles 2023-05-07 08:32:24 UTC
Git commit f7b2ec00a5866ab28ace6bfb31ef86983bc6951f by Gilles Caulier.
Committed on 07/05/2023 at 08:31.
Pushed by cgilles into branch 'master'.

digiKam Online documentation: add note about GAPP support for GPhoto and GDrive tools.

M  +4    -0    export_tools/google_export.rst

https://invent.kde.org/documentation/digikam-doc/commit/f7b2ec00a5866ab28ace6bfb31ef86983bc6951f