Online Service API keys

2015-10-08 Thread Bastien Nocera
Hey,

As we're integrating more and more online services into GNOME, and that
we then need API keys to access those services.

I've move a similar table from a gnome-online-accounts Wiki page to a
separate page to cover all the core GNOME components, also listing
contacts for those keys.

In the future, it would be great if the Board or the release team could
take over the management of API keys, so that we don't end up with lost
keys when contacts aren't available.

The table is at:
https://wiki.gnome.org/Initiatives/OnlineServicesAPIKeys

Please note that this is only for core GNOME components, and that it
shouldn't cover test applications (grilo-test-ui contains a number of
separate API keys as well, for example).

Cheers
___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list


Re: Online Service API keys

2015-10-09 Thread Alberto Mardegan

Hi all!

On 10/08/2015 04:41 PM, Bastien Nocera wrote:

As we're integrating more and more online services into GNOME, and that
we then need API keys to access those services.


I wonder, do you have an opinion on how to handle
  https://bugzilla.gnome.org/show_bug.cgi?id=748991
?

Unless Yorba manifests some interest in getting the Facebook integration 
fixed in Shotwell, would GNOME be willing to takeover the project, and 
consequently the associated Facebook application key?


Ciao,
  Alberto

___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list


Re: Online Service API keys

2015-10-09 Thread Bastien Nocera
On Fri, 2015-10-09 at 17:41 +0300, Alberto Mardegan wrote:
> Hi all!
> 
> On 10/08/2015 04:41 PM, Bastien Nocera wrote:
> > As we're integrating more and more online services into GNOME, and
> > that
> > we then need API keys to access those services.
> 
> I wonder, do you have an opinion on how to handle
>    https://bugzilla.gnome.org/show_bug.cgi?id=748991
> ?
> 
> Unless Yorba manifests some interest in getting the Facebook
> integration 
> fixed in Shotwell, would GNOME be willing to takeover the project,
> and 
> consequently the associated Facebook application key?

I think they should fix it in Shotwell. Either applications integrate
with gnome-online-accounts, or they roll their own. If they roll their
own, it's not up to us to fix their support I'm afraid.

___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list

Re: Online Service API keys

2015-10-09 Thread Michael Catanzaro
On Fri, 2015-10-09 at 17:41 +0300, Alberto Mardegan wrote:
> Unless Yorba manifests some interest in getting the Facebook
> integration 
> fixed in Shotwell, would GNOME be willing to takeover the project,
> and 
> consequently the associated Facebook application key?

To be clear, Shotwell is a GNOME project since it was recently moved to
git.gnome.org. But it's clearly not being developed anymore, so I would
not expect to see any fixes for it unless someone volunteers to help
maintain it. I agree with Bastien, the solution to this problem is for
Shotwell to use gnome-online-accounts rather than a separate API key.

Be warned there is a serious security issue which I've been meaning to
fix but haven't managed to yet: it doesn't verify TLS certificates [1],
so it's easy to get your Facebook password and session cookies. So even
if someone does fix the Facebook integration, you really should not use
it.

Michael

[1] https://bugzilla.gnome.org/show_bug.cgi?id=754488
___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list


Re: Online Service API keys

2015-10-10 Thread Tomasz Torcz
On Fri, Oct 09, 2015 at 02:12:06PM -0500, Michael Catanzaro wrote:
> On Fri, 2015-10-09 at 17:41 +0300, Alberto Mardegan wrote:
> > Unless Yorba manifests some interest in getting the Facebook
> > integration 
> > fixed in Shotwell, would GNOME be willing to takeover the project,
> > and 
> > consequently the associated Facebook application key?
> 
> To be clear, Shotwell is a GNOME project since it was recently moved to
> git.gnome.org. But it's clearly not being developed anymore,

  Slightly offtopic: we had F-Spot but the development ceased.  Then
we had Shotwell which seems dead now.  Is GNOME left without easy,
tagging photo manager?

-- 
Tomasz   .. oo o.   oo o. .o   .o o. o. oo o.   ..
Torcz.. .o .o   .o .o oo   oo .o .. .. oo   oo
o.o.o.   .o .. o.   o. o. o.   o. o. oo .. ..   o.

___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list


Re: Online Service API keys

2015-10-10 Thread Felipe Borges
On Sat, Oct 10, 2015 at 5:26 PM, Tomasz Torcz  wrote:
> On Fri, Oct 09, 2015 at 02:12:06PM -0500, Michael Catanzaro wrote:
>> On Fri, 2015-10-09 at 17:41 +0300, Alberto Mardegan wrote:
>> > Unless Yorba manifests some interest in getting the Facebook
>> > integration
>> > fixed in Shotwell, would GNOME be willing to takeover the project,
>> > and
>> > consequently the associated Facebook application key?
>>
>> To be clear, Shotwell is a GNOME project since it was recently moved to
>> git.gnome.org. But it's clearly not being developed anymore,
>
>   Slightly offtopic: we had F-Spot but the development ceased.  Then
> we had Shotwell which seems dead now.  Is GNOME left without easy,
> tagging photo manager?

What about Photos (gnome-photos)??

>
> --
> Tomasz   .. oo o.   oo o. .o   .o o. o. oo o.   ..
> Torcz.. .o .o   .o .o oo   oo .o .. .. oo   oo
> o.o.o.   .o .. o.   o. o. o.   o. o. oo .. ..   o.
>
> ___
> desktop-devel-list mailing list
> desktop-devel-list@gnome.org
> https://mail.gnome.org/mailman/listinfo/desktop-devel-list
___
desktop-devel-list mailing list
desktop-devel-list@gnome.org
https://mail.gnome.org/mailman/listinfo/desktop-devel-list