touch-packages team mailing list archive

[Alberto Mardegan <1420934@xxxxxxxxxxxxxxxxxx>]

I've been debugging the issue here, according to the steps (and the
logs) which Renato provided me with.

So, a problem arises if the access token has expires and the refresh
token (which can be used to request a new access token without UI
interactions) is still valid, but the client application has been
revoked access from https://myaccount.google.com/ (section "Connected
apps and services"). In that case, here's the logs:

Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: oauth2plugin.cpp 111 OAuth2Plugin :
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: oauth2plugin.cpp 206 respondWithStoredToken : Stored token is expired
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: oauth2plugin.cpp 586 refreshOAuth2Token : "1/XXXX"
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: oauth2plugin.cpp 598 sendOAuth2PostRequest :
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: oauth2plugin.cpp 623 sendOAuth2PostRequest : Query string =   QUrl( "?grant_type=refresh_token&refresh_token=1/XXXX&client_id=759250720802-4sii0me9963n9fdqdmi7cepn6ub8luoh.apps.googleusercontent.com&client_secret=juFngKUcuhB7IRQqHtSLavqJ" ) 
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: base-plugin.cpp 112 postRequest : Posting request:  QUrl( "https://accounts.google.com/o/oauth2/token"; ) 
Feb 13 15:02:15 ubuntu-phablet signonpluginprocess[13128]: ../../../../src/remotepluginprocess/remotepluginprocess.cpp 496 startTask operation is completed
Feb 13 15:02:16 ubuntu-phablet signonpluginprocess[13128]: base-plugin.cpp 152 handleNetworkError : error signal received: 302
Feb 13 15:02:16 ubuntu-phablet signonpluginprocess[13128]: base-plugin.cpp 167 handleNetworkError : Contents: "{#012  "error" : "invalid_grant",#012  "error_description" : "Token has been revoked."#012}"

So, this is a but in signon-plugin-oauth2, which should discard the
refresh token and try the authentication again if some error happens
while using the refresh token.

** Package changed: ubuntu-system-settings-online-accounts (Ubuntu) =>
signon-plugin-oauth2 (Ubuntu)

** Changed in: signon-plugin-oauth2 (Ubuntu)
     Assignee: (unassigned) => Alberto Mardegan (mardy)

** No longer affects: ubuntu-system-settings-online-accounts

** Changed in: signon-plugin-oauth2 (Ubuntu)
       Status: New => In Progress

** Package changed: ubuntu-system-settings-online-accounts (Ubuntu RTM)
=> signon-plugin-oauth2 (Ubuntu RTM)

** Changed in: signon-plugin-oauth2 (Ubuntu RTM)
       Status: New => Confirmed

** Changed in: signon-plugin-oauth2 (Ubuntu RTM)
     Assignee: (unassigned) => Alberto Mardegan (mardy)

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to signon-plugin-oauth2 in
Ubuntu.
https://bugs.launchpad.net/bugs/1420934

Title:
  [online-accounts] re-authenticating an account does not work

Status in the base for Ubuntu mobile products:
  Confirmed
Status in signon-plugin-oauth2 package in Ubuntu:
  In Progress
Status in signon-plugin-oauth2 package in Ubuntu RTM:
  Confirmed

Bug description:
  After a online account token became invalid we should use the function
  "AccountService.authenticate" to re-validate the account. But is is
  not working for google accounts.

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1420934/+subscriptions