microg / microg/GmsCore

Unable to access Google Two-Factor Authentication settings with phone registered to Google account

Open
#1,720 13 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
Java
Stars
14.6k
Forks
3.2k
Avg merge
12d 11h
Merged PRs (30d)
4

Description

Describe the bug
Unable to access Google account Two-Factor settings because "Google Sign-In Prompt" does not function with microG.
Google Two-Factor Authentication settings use three primary means of 2FA verification.

  1.   Google Sign-In Prompt - Google sends a verification code to a phone which appears on-screen
    
  2.   Authenticator app 
    
  3.   SMS/Phone
    

If a user has registered a phone number to a Google account (Unsure if Pixel exclusive) the default is Sign-In Prompt. Authentication requests can be requested via alternatives like an authenticator app. However, accessing Two-Factor Authentication Settings for a Google Account when a phone has been registered forbids the alternate methods. Only Google Sign-In Prompt is permitted as a 2FA method to access the settings page. Due to Calyx not running Google Play Services, these sign-in prompts cannot be received.

To Reproduce

  1. Sign in with username and password to a Google account URL used: https://myaccount.google.com/
  2. Go to Security screen (URL https://myaccount.google.com/security)
  3. Under 'Signing In to Google', click 2-Step Verification
  4. Re-Enter user password
  5. See Image 1, the Google Sign-In Prompt
  6. Click 'Use your phone or tablet to get a security code (even if it's offline) as shown in Image 2
  7. Follow directions provided in Image 3
  8. Menus are different in CalyxOS, on device, open Settings app
  9. Click Passwords & Accounts, and select the Google account
  10. Clicking any of the three options (Sign-in & security, Personal info & privacy, Account preferences) all lead to the same page, see Image 4.
  11. See microG Account settings: "Google Account Services not yet implemented."

Expected behavior
Ability to receive 2FA code, or alternative method of providing a code (i.e. authenticator app_

Screenshots
img01
img02
img03
img04

System
Android Version: 12
Custom ROM: CalyxOS 3.5.1

Edit
Dug a Chromebook out of storage and signed in with that, attempted to use that device as an alternative for authentication prompts. No result. Google settings on ChromeOS does not allow account management on my device.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the flow from https://myaccount.google.com/security through the Android Settings app's Google account options, focusing on the reported "Google Account Services not yet implemented" state. Determine whether microG can support the Google Sign-In Prompt or an alternative verification method, and verify that the 2-Step Verification settings become accessible without Google Play Services.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
authentication, mobile
Issue type
Bug
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.