[Webkit-unassigned] [Bug 240041] [GTK] accounts.google.com denylisting WebKitGTK (sometimes, under uncertain conditions)

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=240041

Kenneth Russell <kbr at google.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kbr at google.com

--- Comment #16 from Kenneth Russell <kbr at google.com> ---
Per my email to webkit-dev@ on this topic, I'm still finding the appropriate team to discuss this issue with. This is my first experience navigating these login issues, so please bear with me.

At the same time, let me please point to this help article, which colleagues on the Chrome team suggested:

https://support.google.com/accounts/answer/7675428

The important thing to notice: embedded browsers are disallowed from signing in to Google accounts. See the mention of Chromium Embedded Framework at the end of the article. This was an intentional security measure instituted to prevent third-party applications from interposing on sign-in. I don't think this is a new security measure - it's been in place for at least a couple of years. Unfortunately, WebKitGTK as a library falls within this categorization.

I'm still discussing with colleagues how the system Epiphany browser, based on WebKitGTK, interacts with this policy. Will update this bug with more information as I learn it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220509/124b93d0/attachment.htm>