I'm a user of some popular web service and I use 3rd-party client for the service. The client is actually abandonware for more than 3 or 4 years, but it's probably the most convenient client ever for that service, so I don't want to switch to another client (at least I want to believe I won't switch). Recently I logged out in the client hence I had to log in again. But, since my account at that service was authenticated by Google, I cannot authenticate now because Google blocks the authentication (as far as I understand, because the authentication is not in a browser):

This user-agent is not permitted to make OAuth authorisation request to Google as it is classified as an embedded user-agent (also known as a web-view). Per our policy, only browsers are permitted to make authorisation requests to Google. We offer several libraries and samples for native apps to perform authorisation request in browser.

As far as I know, this restriction was introduced back in 2016 and since then I had a valid authentication token not even knowing that I won't be able to authenticate anymore. So I got stuck. Nevertheless, the official client shows an authentication popup where I can choose my Google account, that's as far as I understand is not a web-view.

Is there any solution to authenticate as a Google user via a web-view now? (If it's impossible, I can migrate from my Google-authenticated account to a new one, featured by the service, but it won't be that easy.) Your help and advice are highly appreciated. Thanks in advance!

  • 2
    Honestly, no... Unless you have the source for that client application and want to completely re-write it yourself your not going to get authenticated in that app. Best bet is going to be find a supported app or use the official one. Best to name the app and service in your question too, although I don't think it will make much difference.
    – acejavelin
    Nov 17 '17 at 12:41
  • It has been a fair while since I last had a Google account with 2FA enabled, but I remember that it was possible to generate specific passwords to be used with clients which were unable to ask for the token, such as K-9 Mail. This settings should be present at the same page in which you enabled 2FA to begin with.
    – Grimoire
    Nov 17 '17 at 13:07
  • @acejavelin Yep, I was thinking of modifying the decompiled source code as well, but it seems to be an extreme way. Migrating to another account provider is much easier. I think that your comment should be an answer, so I could vote it up and mark as the answer. Thanks! Nov 22 '17 at 23:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.