“Advanced Protection” Google Users Cannot Authorize Login
- Dominant language
- Swift
- Stars
- 288
- Forks
- 43
- PR merge metrics
- No merged PRs in 30d
Description
### Please agree to the following
- [X] I have searched [existing issues](https://github.com/cryptomator/ios/issues?q=) for duplicates
- [X] I agree to follow this project's [Code of Conduct](https://github.com/cryptomator/ios/blob/develop/.github/CODE_OF_CONDUCT.md)
### Summary
Google Members who have enabled Advanced Protection on their accounts cannot authorize Cryptomator to access Drive. I filed this as a “bug” but I realize that it’s not a bug with Cryptomator as such, rather maybe some change that needs to be made to allow access to users with this setup.
### System Setup
- iOS: 15.4 (19E241)
- Cryptomator: 2.2.2 (882)
- Google: Advanced Protection Program
### Cloud Type
Google Drive
### Steps to Reproduce
1. In Cryptomator navigate to Settings > Cloud services > Google Drive > +
2. Login to Googe with Credentials
3. Authorize via Yubikey
4. Error message
### Expected Behavior
Successful authentication of account and approved permissions for Cryptomator to read drive data
### Actual Behavior
Presented with the following error message and message to developers:
Authorization Error
Error 400: policy_enforced
Advanced Protection prevented your Google Account from signing in. This security feature stops most non-Google apps and services from accessing your data to keep your account protected.
[Learn more(https://support.google.com/accounts/?p=2sv_non-goog)
The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.
If you’re the app developer, make sure that these request details comply with Google policies.
response_type: code
code_challenge_method: S256
redirect_uri: com.googleusercontent.apps.1008971033086-g04bmhlsc1cgjisa595bbc61mk1bscfu:/oauthredirect
state: y8nYvseUHr1ag1zi6tWjnUec3d2i_GZxEUBEkmYSETQ
nonce: CvdY5JYUaQsJl_KGmUszpYdMw7UjAmNbXPfeuwFxaOs
code_challenge: G1qLWDEfHlM_UgPqq0bB__Z7oXPfjI485I43JLpY8hk
client_id: 1008971033086-g04bmhlsc1cgjisa595bbc61mk1bscfu.apps.googleusercontent.com
access_type: offline
scope: https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/userinfo.email openid
### Reproducibility
Always
### Relevant Log Output
_No response_
### Anything else?
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.