https://bugs.kde.org/show_bug.cgi?id=486576

Edmund Laugasson <edmund.laugas...@protonmail.ch> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|WAITINGFORINFO              |---
     Ever confirmed|0                           |1
             Status|NEEDSINFO                   |REOPENED

--- Comment #2 from Edmund Laugasson <edmund.laugas...@protonmail.ch> ---
(In reply to Justin Zobel from comment #1)
> By two factor authentication do you mean a One Time Password or the
> authentication that's done via a device such as a phone where it prompts you
> to confirm that it is you signing in?

via device

> I've just been able to add my Google Account to Online Accounts using the
> second method.

To be honest, Online Accounts does not even reach to second factor. The error
message, which screenshot I added, will appear right after email is entered and
Next clicked. I do frequent, usually every day updates and tried again after
fresh updates (which didn't update any KDE part) and still same issue. Although
I use 24.02.2 version
(https://archlinux.org/packages/extra/x86_64/kio-gdrive/), there is 24.04.80
waiting in KDE unstable
(https://archlinux.org/packages/kde-unstable/x86_64/kio-gdrive/).

Reason is here - https://support.google.com/accounts/answer/185833?hl=en

If you’ve set up 2-Step Verification but can’t find the option to add an app
password, it might be because:
Your Google Account has 2-Step Verification set up only for security keys.
You’re logged into a work, school, or another organization account.
Your Google Account has Advanced Protection.

Advanced Protection
https://support.google.com/accounts/answer/7539956
With 2-Step Verification, the second step could be a:
Prompt sent to your phone
Verification code
Security key

I'm using Prompt and Verification code.

Also there is written:
Also, Advanced Protection limits third-party app access to your data, puts
stronger checks on suspicious downloads, and tightens account recovery security
to help prevent unauthorized access.

This is the case. This Advanced Protection is very common - widely used and
this does not allow to create app password e.g. for KDE Online Accounts.

I have also another GMail account, which does not have 2FA enabled and there I
could reach to password field and could log in and add account. Even it
required for security reasons SMS-confirmation and sent me SMS and I could even
enter confirmation code and it logged in. But no 2FA is enabled with that
account.

But with account, where 2FA is enabled, I cannot login. Although I have 14
third party app enabled and in that sense I'm using already that 2FA enabled
Google account with 3rd party apps like KDE Online Accounts also is as I see
under that non-2FA Google account, where I could log in.

With that experiment I showed clearly, that 2FA is preventing to use KDE Online
Accounts. Also as referred upwards, Google itself confirms, that when Advanced
Protection by 2FA (Prompt sent to your phone, Verification code) is enabled,
then Advanced Protection limits third-party app access to your data, puts
stronger checks on suspicious downloads, and tightens account recovery security
to help prevent unauthorized access. So, I experience that limitation as I
don't see any way to allow KDE Online Accounts to be used while 2FA (Advanced
Protection) is enabled.

OAuth2 seems to be in use -
https://developers.google.com/identity/account-linking/oauth-linking

Why do you change importance to normal when this issue is still critical as
there is not possible to log in?

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to