Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

App 'gcalcli' is blocked - The out-of-band (OOB) flow has been blocked #674

Closed
bittorf opened this issue Jan 9, 2024 · 8 comments
Closed

Comments

@bittorf
Copy link

bittorf commented Jan 9, 2024

It worked some days, but not anymore - maybe it's just me:

user@box:~$ gcalcli --version
gcalcli v4.3.0 (Eric Davis, Brian Hartvigsen, Joshua Crowgey)

user@box:~$ gcalcli list
 Access  Title
 ------  -----
  owner  [email protected]
<works>

bastian@NAS:~$ gcalcli --noauth_local_webserver agenda

Go to the following link in your browser:

    https://accounts.google.com/o/oauth2/v2/auth?client_id=XXXXX.apps.googleusercontent.com&redirect_uri=urn%3Aietf%3Awg%3Aoauth%3A2.0%3Aoob&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcalendar&access_type=offline&response_type=code

when accessing this link I get:

Error 400: invalid_request
The out-of-band (OOB) flow has been blocked in order to keep users secure. Follow the Out-of-Band (OOB) flow migration guide linked in the developer docs below to migrate your app to an alternative method.
Details: redirect_uri=urn:ietf:wg:oauth:2.0:oob 

It says:
"This app is blocked
This app has tried to access confidential data in your Google account. We have blocked access to protect your account."

grafik

@ErikKnowles
Copy link

ErikKnowles commented Jan 9, 2024

It's not just you. I've been reauthorizing the app for a long time now, but today I'm seeing the same symptoms.

@MatHoffman
Copy link

same here, not just you :)

@bombermuecke
Copy link

gcalclierr
I get this with "--noauth_local_webserver". Worked until last week.

bittorf added a commit to bittorf/eink-google-calendar-to-html-to-image that referenced this issue Jan 10, 2024
look like with the new error-ribbon.
see 8d0a8aa

the underlying issue comes from:
insanum/gcalcli#674
@rcbellN51
Copy link

rcbellN51 commented Jan 11, 2024

Had this problem for the past two days as well but seems to have resolved itself with a large (~700 pkg) update on FreeBSD 13.2. I don't think gcalcli itself was updated so may be an issue with some other dependency.

Or, maybe it's coincidence, and it was resolved on Google's end.

@ErikKnowles
Copy link

ErikKnowles commented Jan 11, 2024

Had this problem for the past two days as well but seems to have resolved itself with a large (~700 pkg) update on FreeBSD 13.2. I don't think gcalcli itself was updated so may be an issue with some other dependency.

Or, maybe it's coincidence, and it was resolved on Google's end.

My gcalcli's on a system that hasn't been updated in years (hey, it's a firewalled internal-use only computer so don't judge!), so a breaking system update's definitely not the problem. That said, I'm back in business too! Must have been a Google problem.

Thanks for the update.

@rcbellN51
Copy link

rcbellN51 commented Jan 11, 2024

Likely broken (and fixed?) on Google's end then.

For the record I use "gcalcli --client-id=XXXXX.apps.googleusercontent.com --client-secret=XXXXX agenda" to authenticate once a week since forever. Part of my troubleshooting efforts yesterday was to rename .gcalcli_cache and .gcalcli_oauth to .gcalcli_cache.bak and .gcalcli_oauth.bak in my home directory.

After the update today i just tried using "gcalcli --noauth_local_webserver agenda" with the same error from the past 2 days resulting. Then I remembered I'd renamed those files, renamed them back to .gcalcli_cache and .gcalcli_oauth and did my normal reauth step of "gcalcli --client-id=XXXXX.apps.googleusercontent.com --client-secret=XXXXX agenda", and it worked (for the next week or so anyway).

@bombermuecke
Copy link

idk the reason, but it's working again.

@bittorf
Copy link
Author

bittorf commented Jan 13, 2024

I can confirm, that it works again (for me too)
On my side i had to perform these steps:

#!/bin/sh
ID="XXX.apps.googleusercontent.com"
KEY="XXXXXX"

cd ~
mv .gcalcli_cache .gcalcli_cache.backup
mv .gcalcli_oauth .gcalcli_oauth.backup
gcalcli "--client-id=$ID" "--client-secret=$KEY" --noauth_local_webserver agenda

Thanks a lot to all of you, happy gcalcli'ing!

@bittorf bittorf closed this as completed Jan 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants