django-rest-framework-social-oauth2 icon indicating copy to clipboard operation
django-rest-framework-social-oauth2 copied to clipboard

Google+ APIs deprecated March 2019

Open mking42 opened this issue 6 years ago • 8 comments

Hello,

A dependancy of this project is reliant on the soon to be deprectated Google+ APIs. This will render the Google Auth functionality of this package unusable.

As per a recent Google Email: "...we will be shutting down our Google+ APIs on March 7, 2019. As part of these changes, Google+ Sign-in has been fully deprecated and will also be shut down on March 7, 2019."

"...calls to these APIs starting to intermittently fail as early as January 28, 2019."

I am currently using Google OAuth2 on my app: AUTHENTICATION_BACKENDS = ( 'social_core.backends.google.GoogleOAuth2', 'rest_framework_social_oauth2.backends.DjangoOAuth2', )

My pipeline looks like this: SOCIAL_AUTH_PIPELINE = ( 'social_core.pipeline.social_auth.social_details', 'social_core.pipeline.social_auth.social_uid', 'social_core.pipeline.social_auth.auth_allowed', 'social_core.pipeline.social_auth.social_user', 'social_core.pipeline.user.get_username', 'social_core.pipeline.social_auth.associate_by_email', 'social_core.pipeline.user.create_user', 'social_core.pipeline.social_auth.associate_user', 'social_core.pipeline.social_auth.load_extra_data', 'social_core.pipeline.user.user_details', )

The specific part of the Google+ API being used is "plus.people.get".

If Google+ APIs in my Google Console is disabled i get the following error when trying to convert the token.

"Access Not Configured. Google+ API has not been used in project # before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=# then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.",\n "extendedHelp": "https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=#"\n }\n ],\n "code": 403,\n "message": "Access Not Configured. Google+ API has not been used in project # before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=# then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry."

This issue looks to be related to a dependancy: Package: python-social-auth/social-core

social_core/backends/google.py https://www.googleapis.com/plus/v1/people/me,

57 | params={ 58 | 'access_token': access_token, … |   95 | REVOKE_TOKEN_URL = 'https://accounts.google.com/o/oauth2/revoke' 96 | REVOKE_TOKEN_METHOD = 'GET' 97 | DEFAULT_SCOPE = [ 98 | 'https://www.googleapis.com/auth/plus.login',

Thanks.

mking42 avatar Dec 21 '18 00:12 mking42

A fix is being worked on in the package: python-social-auth/social-core https://github.com/python-social-auth/social-core/issues/300

mking42 avatar Dec 22 '18 01:12 mking42

This has now been fixed. A commit was pushed to social-core (a dependency of this package). See: https://github.com/python-social-auth/social-core/pull/301/commits/d77d75547b9ada3460a1b6809c8c9ad854f76871

mking42 avatar Dec 31 '18 02:12 mking42

This has not been resolved up until today, so an update to 3.0.0 dependency is in need still.

Tusky avatar Jan 14 '19 16:01 Tusky

+1 to get this resolved ASAP, especially given they said the API could start failing as soon as... 3 days ago!

assembledadam avatar Jan 31 '19 13:01 assembledadam

+1

fernandolins avatar Feb 06 '19 14:02 fernandolins

Manually updating your installed version of social-core should work?

mking42 avatar Feb 16 '19 04:02 mking42

Still getting the same error, still trying to use https://www.googleapis.com/plus/v1/people/me?access_token=xxx

lsandoval0000 avatar Mar 05 '19 02:03 lsandoval0000

Hi all.

My team and I are constantly using this framework and it seems it has died out there. I contacted the owner by email asking if he would add some of us as maintainers so we could continue to improve it. However we didn't get a response.

I am publishing the project under my profile and we are going to continue to invest time in it.

So I would like to gently ask you to contribute to this project on: https://github.com/wagnerdelima/drf-social-oauth2

Thank you for understanding.

wagnerdelima avatar Jul 04 '20 15:07 wagnerdelima