cryptomator / cryptomator/ios

“Advanced Protection” Google Users Cannot Authorize Login

Open
#196 3 comments 0 reactions 0 assignees View on GitHub
state:confirmed storage:google-drive
Dominant language
Swift
Stars
288
Forks
43
PR merge metrics
No merged PRs in 30d

Description

### Please agree to the following

- [X] I have searched [existing issues](https://github.com/cryptomator/ios/issues?q=) for duplicates
- [X] I agree to follow this project's [Code of Conduct](https://github.com/cryptomator/ios/blob/develop/.github/CODE_OF_CONDUCT.md)

### Summary

Google Members who have enabled Advanced Protection on their accounts cannot authorize Cryptomator to access Drive. I filed this as a “bug” but I realize that it’s not a bug with Cryptomator as such, rather maybe some change that needs to be made to allow access to users with this setup.

### System Setup

- iOS: 15.4 (19E241)
- Cryptomator: 2.2.2 (882)
- Google: Advanced Protection Program

### Cloud Type

Google Drive

### Steps to Reproduce

1. In Cryptomator navigate to Settings > Cloud services > Google Drive > +
2. Login to Googe with Credentials
3. Authorize via Yubikey
4. Error message

### Expected Behavior

Successful authentication of account and approved permissions for Cryptomator to read drive data

### Actual Behavior

Presented with the following error message and message to developers:

Authorization Error
Error 400: policy_enforced

Advanced Protection prevented your Google Account from signing in. This security feature stops most non-Google apps and services from accessing your data to keep your account protected.

[Learn more(https://support.google.com/accounts/?p=2sv_non-goog)

The content in this section has been provided by the app developer. This content has not been reviewed or verified by Google.
If you’re the app developer, make sure that these request details comply with Google policies.

response_type: code
code_challenge_method: S256
redirect_uri: com.googleusercontent.apps.1008971033086-g04bmhlsc1cgjisa595bbc61mk1bscfu:/oauthredirect
state: y8nYvseUHr1ag1zi6tWjnUec3d2i_GZxEUBEkmYSETQ
nonce: CvdY5JYUaQsJl_KGmUszpYdMw7UjAmNbXPfeuwFxaOs
code_challenge: G1qLWDEfHlM_UgPqq0bB__Z7oXPfjI485I43JLpY8hk
client_id: 1008971033086-g04bmhlsc1cgjisa595bbc61mk1bscfu.apps.googleusercontent.com
access_type: offline
scope: https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/userinfo.email openid

### Reproducibility

Always

### Relevant Log Output

_No response_

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.