Deja Dup's Google support will break in September 2022 for versions < 43.3
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
deja-dup (Debian) |
New
|
Unknown
|
|||
deja-dup (Ubuntu) |
Fix Released
|
High
|
Sebastien Bacher | ||
Focal |
Fix Released
|
High
|
Nathan Teodosio | ||
Jammy |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
* Impact
The method Deja-Dup is using to authentificate to google account will stop working in september.
* Test case
Configure deja-dup to do backups on a google drive account. After confirming the authorization through the web browser it should be possible to start the backup.
Check on the webview that the files are correctly added.
Restore some data and ensure that's working.
* Regression potential
The codepath is used for oauth authentification and integration with the system mimetype. Check that the webbrowser auth workflow works as expected, testing deb and snap based browsers
-------
Hello! I'm the maintainer of Deja Dup. I was recently made aware that Google is removing an oauth workflow that Deja Dup uses, in September.
Here's their blog post about it: https:/
Here's the upstream bug about switching to a new oauth flow: https:/
I've released version 43.3 with a new oauth workflow. This basically switches us from redirecting the oauth page to a local http://
The key differences for packagers is just to note that now deja-dup will register itself as a handler for those weird URI schemes (they are specific to deja-dup, as they include its client ids for the service).
I think this deserves a backport to all supported releases. I can whip up a patch for you in a bit, just wanted to get this registered as an issue.
To be a bit more specific about what will break:
- Existing users that have already granted deja-dup access to Google will continue to work without any issue.
- In August, users will see a warning on the oauth screen.
- And then in September, any new attempt to connect deja-dup to Google will not work.
description: | updated |
description: | updated |
Changed in deja-dup (Debian): | |
status: | Unknown → New |
Changed in deja-dup (Ubuntu Focal): | |
status: | New → In Progress |
Thanks Michael for the headsup. We will update to 43 for Kinetic now that the LTS is out we plan to go with the current version of the GNOME libraries but backports of the changes to older series would be welcome as we will need to do SRUs.
I think it makes sense for you as an upstream to probably do 42 which is the last GTK3 supported version and it's probably on us to backport to older version as needed.