[Bug 2036333] Re: signon-ui no longer works for Google authentication

Sat Dec 23 20:43:03 UTC 2023

Launchpad has imported 9 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=2230099.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2023-08-08T17:44:27+00:00 bernie+fedora wrote:

It appears that signon-ui 0.15 causes the bug reported here:
https://bugs.kde.org/show_bug.cgi?id=420280#c40

Multiple users report no issues with 0.17, which was released 5 years ago on GitLab:
https://gitlab.com/accounts-sso/signon-ui/-/commits/master?ref_type=heads


Reproducible: Always

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/0

------------------------------------------------------------------------
On 2023-08-15T19:38:23+00:00 imanolbarba wrote:

I was able to fix the mentioned bug by updating the `signon-ui` package
as indicated by the reporter.

Just keep it mind it's not just updating the version, it's changing the
upstream URL to a fork of the original package.

I was able to build the package that fix the bug applying the following
changes to the SPEC file for the `signon-ui` package:

```

--- signon-ui.spec.orig 2023-08-15 20:48:44.395812563 +0200
+++ signon-ui.spec      2023-08-15 21:27:53.028272559 +0200
@@ -1,14 +1,12 @@
 Name:           signon-ui
-Version:        0.15
+Version:        0.17+15.10.20150810
 Release:        19%{?dist}
 Summary:        Online Accounts Sign-on Ui
 
 License:        GPLv3
-URL:            https://launchpad.net/signon-ui
+URL:            https://gitlab.com/accounts-sso/signon-ui
 
-Source0:        https://launchpad.net/signon-ui/trunk/%{version}/+download/signon-ui-%{version}.tar.bz2
-
-Patch0:         signon-ui-0.15-fix-qt5-build.patch
+Source0:        https://gitlab.com/accounts-sso/signon-ui/-/archive/%{version}-0ubuntu1/signon-ui-%{version}-0ubuntu1.tar.gz
 
 BuildRequires: make
 BuildRequires:  qt5-qtbase-devel
@@ -17,6 +15,7 @@
 BuildRequires:  signon-devel
 BuildRequires:  libproxy-devel
 BuildRequires:  libnotify-devel
+BuildRequires:  qt5-qtwebengine-devel
 
 Requires:       dbus
 
@@ -35,9 +34,7 @@
 
 
 %prep
-%setup -q -n signon-ui-%{version}
-
-%patch0 -p1 -b .qt5
+%setup -q -n signon-ui-%{version}-0ubuntu1
 
 
 %build
@@ -51,10 +48,6 @@
 %install
 make install INSTALL_ROOT=%{buildroot}
 
-# Remove installed tests
-rm %{buildroot}/%{_bindir}/signon-ui-unittest
-rm %{buildroot}/%{_bindir}/tst_inactivity_timer
-
 # Own directory where others can install provider-specific configuration
 mkdir -p %{buildroot}/%{_sysconfdir}/signon-ui/webkit-options.d
```

Interesting tidbits:
- Requires 1 new dependency
- no patches required
- Had to change the version references around a bit because the upstream url is adding the `-0ubuntu1` release to the version number

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/1

------------------------------------------------------------------------
On 2023-08-16T08:14:04+00:00 releng wrote:

This bug appears to have been reported against 'rawhide' during the Fedora Linux 39 development cycle.
Changing version to 39.

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/2

------------------------------------------------------------------------
On 2023-08-21T04:36:57+00:00 xalt7x.service wrote:

(In reply to Fedora Release Engineering from comment #2)
> This bug appears to have been reported against 'rawhide' during the Fedora
> Linux 39 development cycle.
> Changing version to 39.

This issue is reproducible on 38.

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/3

------------------------------------------------------------------------
On 2023-08-24T04:46:37+00:00 amishra1577 wrote:

This bug in signon-ui v01.15 prevents Fedora KDE spin users from using
their online accounts in KDE. To fix this, please upgrade to signon-ui
v0.17.

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/4

------------------------------------------------------------------------
On 2023-08-25T17:08:02+00:00 dabiswas112 wrote:

Hi, I'm shipping signon-ui 0.17 in my COPR at hazel-bunnny:ports. It
does not fix the problem. I'm still unable to sign in to google. Has
anyone been able to sign in successfully with a new account?

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/5

------------------------------------------------------------------------
On 2023-08-25T19:13:12+00:00 dabiswas112 wrote:

Hi, I've fixed this on my copr at hazel-bunny/ports. I have also ported
the signon-ui spec from webkit to webengine, because qt5-qtwebkit is a
big security hole according to a GNOME guy.

@rdieter could you check if the updates in https://github.com/hazel-
bunny/rpm-packaging/tree/master/lib/signon are acceptable?

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/6

------------------------------------------------------------------------
On 2023-09-17T10:20:06+00:00 colin.thomson wrote:

(In reply to dabiswas112 from comment #6)
> Hi, I've fixed this on my copr at hazel-bunny/ports. I have also ported the
> signon-ui spec from webkit to webengine, because qt5-qtwebkit is a big
> security hole according to a GNOME guy.

FYI I have just tested your signon* updates from your COPR and can
confirm it works fine for me on this fc38 box. I was able to create a
new Google account.

It fixes https://bugs.kde.org/show_bug.cgi?id=420280 for me.

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/9

------------------------------------------------------------------------
On 2023-12-23T19:08:05+00:00 fedora wrote:

Also, the dependency on `qt5-qtwebkit` could be dropped, which should be
done for security reasons too (see bug #1872819)

Reply at: https://bugs.launchpad.net/ubuntu/+source/signon-
ui/+bug/2036333/comments/12


** Changed in: signon-ui (Fedora)
       Status: Unknown => Confirmed

** Changed in: signon-ui (Fedora)
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/2036333

Title:
  signon-ui no longer works for Google authentication

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kio-gdrive/+bug/2036333/+subscriptions


