django-rest-framework-social-oauth2
django-rest-framework-social-oauth2 copied to clipboard
Google+ APIs deprecated March 2019
Hello,
A dependancy of this project is reliant on the soon to be deprectated Google+ APIs. This will render the Google Auth functionality of this package unusable.
As per a recent Google Email: "...we will be shutting down our Google+ APIs on March 7, 2019. As part of these changes, Google+ Sign-in has been fully deprecated and will also be shut down on March 7, 2019."
"...calls to these APIs starting to intermittently fail as early as January 28, 2019."
I am currently using Google OAuth2 on my app: AUTHENTICATION_BACKENDS = ( 'social_core.backends.google.GoogleOAuth2', 'rest_framework_social_oauth2.backends.DjangoOAuth2', )
My pipeline looks like this: SOCIAL_AUTH_PIPELINE = ( 'social_core.pipeline.social_auth.social_details', 'social_core.pipeline.social_auth.social_uid', 'social_core.pipeline.social_auth.auth_allowed', 'social_core.pipeline.social_auth.social_user', 'social_core.pipeline.user.get_username', 'social_core.pipeline.social_auth.associate_by_email', 'social_core.pipeline.user.create_user', 'social_core.pipeline.social_auth.associate_user', 'social_core.pipeline.social_auth.load_extra_data', 'social_core.pipeline.user.user_details', )
The specific part of the Google+ API being used is "plus.people.get".
If Google+ APIs in my Google Console is disabled i get the following error when trying to convert the token.
"Access Not Configured. Google+ API has not been used in project # before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=# then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.",\n "extendedHelp": "https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=#"\n }\n ],\n "code": 403,\n "message": "Access Not Configured. Google+ API has not been used in project # before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/plus.googleapis.com/overview?project=# then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry."
This issue looks to be related to a dependancy: Package: python-social-auth/social-core
social_core/backends/google.py https://www.googleapis.com/plus/v1/people/me,
57 | params={ 58 | 'access_token': access_token, … | 95 | REVOKE_TOKEN_URL = 'https://accounts.google.com/o/oauth2/revoke' 96 | REVOKE_TOKEN_METHOD = 'GET' 97 | DEFAULT_SCOPE = [ 98 | 'https://www.googleapis.com/auth/plus.login',
Thanks.
A fix is being worked on in the package: python-social-auth/social-core https://github.com/python-social-auth/social-core/issues/300
This has now been fixed. A commit was pushed to social-core (a dependency of this package). See: https://github.com/python-social-auth/social-core/pull/301/commits/d77d75547b9ada3460a1b6809c8c9ad854f76871
This has not been resolved up until today, so an update to 3.0.0 dependency is in need still.
+1 to get this resolved ASAP, especially given they said the API could start failing as soon as... 3 days ago!
+1
Manually updating your installed version of social-core should work?
Still getting the same error, still trying to use https://www.googleapis.com/plus/v1/people/me?access_token=xxx
Hi all.
My team and I are constantly using this framework and it seems it has died out there. I contacted the owner by email asking if he would add some of us as maintainers so we could continue to improve it. However we didn't get a response.
I am publishing the project under my profile and we are going to continue to invest time in it.
So I would like to gently ask you to contribute to this project on: https://github.com/wagnerdelima/drf-social-oauth2
Thank you for understanding.