[webkit-dev] Starting January 4, 2021, Google will block all sign-ins to Google accounts from embedded browser frameworks

[Michael Catanzaro]

On Tue, Nov 17, 2020 at 3:22 pm, Maciej Stachowiak <mjs at apple.com> 
wrote:
> This sounds obnoxious and potentially anti-competitive. But I think 
> it’s restricted to OAuth flows, which would indeed only affect 
> other sites that allow the user to sign in with their Google account. 
> So that would be the thing to test.

I tested oauth login this using my hacked-up ResourceRequestBase with 
gnome-online-accounts... and it still worked fine. So assuming the 
behavior on January 4 matches the behavior when we send this test 
header today, we should be OK... at least for now.

I'm still rattled. The statement of intent is pretty clear: anything 
that's not a major browser is illegitimate and may be blocked. There's 
not really any significant technical reason to block CEF but not 
WebKit, after all. It's probably only a matter of time....