Bug 480779 - Can not add Google to Online Accounts anymore using a recent version of signon-ui
Summary: Can not add Google to Online Accounts anymore using a recent version of signo...
Status: CONFIRMED
Alias: None
Product: systemsettings
Classification: Applications
Component: kcm_kaccounts (show other bugs)
Version: unspecified
Platform: Neon Linux
: HI grave
Target Milestone: ---
Assignee: Plasma Bugs List
URL:
Keywords: qt6
: 482808 484741 485286 489435 489645 490925 (view as bug list)
Depends on:
Blocks:
 
Reported: 2024-02-03 15:04 UTC by shatz.dan
Modified: 2024-11-19 17:05 UTC (History)
29 users (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:


Attachments
Google sign in browser window (45.57 KB, image/png)
2024-02-03 15:04 UTC, shatz.dan
Details

Note You need to log in before you can comment on or make changes to this bug.
Description shatz.dan 2024-02-03 15:04:12 UTC
Created attachment 165499 [details]
Google sign in browser window

SUMMARY


STEPS TO REPRODUCE
1. System Settings -> Online Accounts -> Add -> Google
2. Enter email, press next.

OBSERVED RESULT
Couldn’t sign you in - This browser or app may not be secure. See screenshot.
Learn more leads here: https://support.google.com/accounts/answer/7675428?hl=en-US


EXPECTED RESULT
Password/2FA fields are shown.

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 shatz.dan 2024-02-03 15:05:50 UTC
Sorry, versions:

SOFTWARE/OS VERSIONS
Linux/KDE Plasma:  KDE Neon Unstable
(available in About System)
KDE Plasma Version: 6.0.80
KDE Frameworks Version: 5.249.0
Qt Version: 6.6.1
Comment 2 Nate Graham 2024-02-05 21:52:28 UTC
Indeed, it looks like we're going to need to make some changes here.
Comment 3 Nicolas Fella 2024-02-17 10:05:30 UTC
Works fine for me on Fedora Rawhide. Likely has to do with signon-ui/QtWebengine, but there's no obvious difference between Fedora and Neon as far as I can tell
Comment 4 Nicolas Fella 2024-03-08 10:28:20 UTC
*** Bug 482808 has been marked as a duplicate of this bug. ***
Comment 5 leob94mt 2024-03-08 15:45:56 UTC
I can reproduce this bug on my machine. 

Operating System: Arch Linux 
KDE Plasma Version: 6.0.1
KDE Frameworks Version: 6.0.0
Qt Version: 6.6.2
Kernel Version: 6.7.8-arch1-1 (64-bit)
Graphics Platform: Wayland
Processors: 12 × AMD Ryzen 5 5625U with Radeon Graphics
Memory: 14.5 GiB of RAM
Graphics Processor: AMD Radeon Graphics
Comment 6 Esteve 2024-03-11 09:23:41 UTC
Hi all, I can confirm this bug either in a HP Zbook running Plasma 6.00 and also in a virtual machine running VMWare also running Plasma 6.00.
My google account is 2FA activated.
If you need more details, just let me know.
Comment 7 Jens 2024-03-25 09:27:33 UTC
I have he same issue on KDE Neon based on Ubuntu 22.04 with KDE 6 upgraded from KDE 5.

Additionally, existing Google accounts do not show any files any more (the loading never stops).
Comment 8 Andrés Becerra 2024-04-10 16:39:13 UTC
Running systemsettings from the command line and trying to add a new google account I get:

"google"
Looking for plugin ""
Starting auth session with "oauth2"
Info:
        Id: 105
        caption: "google"
        owner: ""
        userName: ""
qt.dbus.integration: Could not disconnect "com.google.code.AccountsSSO.SingleSignOn.Identity" to "destroyed(QObject*)" : Pointers are not supported: QObject*


This occurs in a Gentoo system with plasma-6.0.3 with qt-6.7.0
Comment 9 Nate Graham 2024-07-03 17:31:28 UTC
*** Bug 484741 has been marked as a duplicate of this bug. ***
Comment 10 Nate Graham 2024-07-03 17:32:19 UTC
*** Bug 489645 has been marked as a duplicate of this bug. ***
Comment 11 Nate Graham 2024-07-03 17:32:41 UTC
*** Bug 489435 has been marked as a duplicate of this bug. ***
Comment 12 ratijas 2024-07-04 23:07:40 UTC
I'm 99% sure that "qt.dbus.integration" error from post #8 is not related to the issue at hands, and in fact is just a side effect of automatic runtime method registration which was not supposed to register the pre-descruction signal.
Comment 13 Szczepan Hołyszewski 2024-07-23 19:29:48 UTC
I just tripped on this, and here's a workaround that worked for me, combined from an earlier workaround posted in #485286 and my own experimentation:

 1. I maximized the embedded browser window that displays the authentication page
 2. I switched the language to Polish (my language)
 3. As per the original workaround (which was insufficient on its own in my case), I clicked Next with mouse instead of using Enter

No further problems encountered.
Comment 14 duha.bugs 2024-07-28 19:19:34 UTC
*** Bug 490925 has been marked as a duplicate of this bug. ***
Comment 15 gabriel.rilling 2024-08-22 04:40:55 UTC
(In reply to Szczepan Hołyszewski from comment #13)
> I just tripped on this, and here's a workaround that worked for me, combined
> from an earlier workaround posted in #485286 and my own experimentation:
> 
>  1. I maximized the embedded browser window that displays the authentication
> page
>  2. I switched the language to Polish (my language)
>  3. As per the original workaround (which was insufficient on its own in my
> case), I clicked Next with mouse instead of using Enter
> 
> No further problems encountered.

This worked for me too, although I did not change the language.
Comment 16 Tim 2024-09-07 23:00:01 UTC
Tokens expiring in Dolphin also. Also cant add Google account in Solus Plasma 6.
Comment 17 Marc 2024-09-10 18:11:56 UTC
(In reply to gabriel.rilling from comment #15)
> (In reply to Szczepan Hołyszewski from comment #13)
> > I just tripped on this, and here's a workaround that worked for me, combined
> > from an earlier workaround posted in #485286 and my own experimentation:
> > 
> >  1. I maximized the embedded browser window that displays the authentication
> > page
> >  2. I switched the language to Polish (my language)
> >  3. As per the original workaround (which was insufficient on its own in my
> > case), I clicked Next with mouse instead of using Enter
> > 
> > No further problems encountered.
> 
> This worked for me too, although I did not change the language.

I've tried this a few times on two separate systems, I don't speak polish and even tried that part specifically but unable to reproduce today.
All items give an error indicating that there is an issue with the browser used for sign or the app setup to allow sign-in.
Comment 18 Elvis Angelaccio 2024-09-23 20:21:20 UTC
*** Bug 485286 has been marked as a duplicate of this bug. ***
Comment 19 Elvis Angelaccio 2024-09-23 20:31:27 UTC
(In reply to Elvis Angelaccio from comment #18)
> *** Bug 485286 has been marked as a duplicate of this bug. ***

Actually, even this report really looks like a duplicate of #420280

I guess we can close this one as well?
Comment 20 gabriel.rilling 2024-09-23 22:18:24 UTC
(In reply to Elvis Angelaccio from comment #19)
> (In reply to Elvis Angelaccio from comment #18)
> > *** Bug 485286 has been marked as a duplicate of this bug. ***
> 
> Actually, even this report really looks like a duplicate of #420280
> 
> I guess we can close this one as well?

Like https://bugs.kde.org/show_bug.cgi?id=420280#c105 , I'm facing this bug on Arch with a fairly recent signon-ui version (0.17+20231016), so this may not be the same bug as #420280 which is apparently due to a too old signon-ui version.
Comment 21 Marc 2024-09-23 23:10:49 UTC
Seconded,

I am on signon-ui 0.17+20231016-2 and facing this issue.
Comment 22 Elvis Angelaccio 2024-09-24 17:49:31 UTC
(In reply to gabriel.rilling from comment #20)
> (In reply to Elvis Angelaccio from comment #19)
> > (In reply to Elvis Angelaccio from comment #18)
> > > *** Bug 485286 has been marked as a duplicate of this bug. ***
> > 
> > Actually, even this report really looks like a duplicate of #420280
> > 
> > I guess we can close this one as well?
> 
> Like https://bugs.kde.org/show_bug.cgi?id=420280#c105 , I'm facing this bug
> on Arch with a fairly recent signon-ui version (0.17+20231016), so this may
> not be the same bug as #420280 which is apparently due to a too old
> signon-ui version.

Right, I'll rename this report then.

Btw, I cannot reproduce on arch with signon-ui version 0.17+20231016-2
Comment 23 Andrés Becerra 2024-10-17 11:43:46 UTC
For Gentoo this bug is solved with =>signon-ui-0.15_p20231016-r2
Comment 24 Guido 2024-11-11 15:39:32 UTC
(In reply to Szczepan Hołyszewski from comment #13)
> I just tripped on this, and here's a workaround that worked for me, combined
> from an earlier workaround posted in #485286 and my own experimentation:
> 
>  1. I maximized the embedded browser window that displays the authentication
> page
>  2. I switched the language to Polish (my language)
>  3. As per the original workaround (which was insufficient on its own in my
> case), I clicked Next with mouse instead of using Enter
> 
> No further problems encountered.

Incredibly, it works. Totally nonsensical, but it works.
Comment 25 Michael 2024-11-12 01:57:23 UTC
(In reply to Guido from comment #24)
> Incredibly, it works. Totally nonsensical, but it works.

Okay, this gets me further into the sign on process, where it asks me to verify my Google account on my phone, it then momentarily appears to succeed, then the embedded browser page abruptly clears and switches to say: 

> This app is blocked
> This app tried to access sensitive info in your Google Account. To keep your account safe, Google blocked this access.

When starting systemsettings from the commandline and I run through this process, I get this message:

> org.kde.kaccounts.lib: Error:
> org.kde.kaccounts.lib:   "Access grant not present"

So it seems that this can work when the embedded browser window is made full-screen (which is very weird, and no, I didn't have to change the default language). Regarding making the embedded browser full-screen, if I double-click on the titlebar, then the process will fail like it always does; I have to click the maximize button on the titlebar to have any kind of progress.

Given the error "This app is blocked", maybe this issue is on Google's end?
Comment 26 Gareth 2024-11-13 23:28:03 UTC
(In reply to Michael from comment #25)
> Given the error "This app is blocked", maybe this issue is on Google's end?

Yeah, something about what KDE wants to do with the account is tripping some (seemingly newer?) protection on Google's end.
Comment 27 devminer 2024-11-14 10:50:58 UTC
Ideally, KDE should use OAuth2 via the user's default browser instead of opening up an integrated browser that doesn't know any sessions.
Comment 28 Diego 2024-11-19 13:10:19 UTC
See this interesting comment here about contents of `/usr/share/accounts/providers/kde/google.provider`:
https://discuss.kde.org/t/kde-online-accounts-not-signing-in/3411/38
Comment 29 Marc 2024-11-19 17:05:01 UTC
(In reply to Diego from comment #28)
> See this interesting comment here about contents of
> `/usr/share/accounts/providers/kde/google.provider`:
> https://discuss.kde.org/t/kde-online-accounts-not-signing-in/3411/38

Changed provider details to those specified in the linked post used by gnome.  Mine works now.
It seems like the details specified in the google.provider file included by default with KDE are just invalid now.