...
 
Commits (4)
gnome-online-accounts (3.30.1-2) unstable; urgency=medium
* Disable Todoist provider. It was never enabled by default by GNOME
and has been removed from GNOME 3.32. This means it wouldn't be
supported for Buster.
* Cherry-pick google-Only-request-the-email-field.patch:
- Retrieve only the email address from Google instead of all personally
identifiable information
-- Jeremy Bicha <jbicha@debian.org> Sat, 09 Feb 2019 16:55:02 -0500
gnome-online-accounts (3.30.1-1) unstable; urgency=medium
* New upstream release
......
......@@ -2,13 +2,16 @@
pristine-tar = True
debian-branch = debian/master
upstream-branch = upstream/latest
upstream-vcs-tag = %(version)s
[buildpackage]
sign-tags = True
[dch]
multimaint-merge = True
[import-orig]
postimport = dch -v%(version)s New upstream release; git add debian/changelog; debcommit
upstream-vcs-tag = %(version)s
[pq]
patch-numbers = False
From: Neil McGovern <neil@gnome.org>
Date: Thu, 31 Jan 2019 14:24:19 +0100
Subject: google: Only request the email field when getting the user's
identity
Currently, a lot of personal information was being received, including
gender and profile picture. The email is the only thing that's really
used, for the account's identity and presentation identy, and the rest
was being simply thrown away. Therefore, avoid receiving them in the
first place.
Verified via the Google APIs Explorer and the Google OAuth 2.0
Playground:
https://developers.google.com/apis-explorer/#p/oauth2/v2/oauth2.userinfo.get
https://developers.google.com/oauthplayground/
https://gitlab.gnome.org/GNOME/gnome-online-accounts/merge_requests/19
---
src/goabackend/goagoogleprovider.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/goabackend/goagoogleprovider.c b/src/goabackend/goagoogleprovider.c
index cc9a8f8..9e331c1 100644
--- a/src/goabackend/goagoogleprovider.c
+++ b/src/goabackend/goagoogleprovider.c
@@ -172,6 +172,7 @@ get_identity_sync (GoaOAuth2Provider *oauth2_provider,
call = rest_proxy_new_call (proxy);
rest_proxy_call_set_method (call, "GET");
rest_proxy_call_add_param (call, "access_token", access_token);
+ rest_proxy_call_add_param (call, "fields", "email");
if (!rest_proxy_call_sync (call, error))
goto out;
google-Only-request-the-email-field.patch
......@@ -18,7 +18,7 @@ override_dh_auto_configure:
--disable-media-server \
--enable-facebook \
--enable-flickr \
--enable-todoist \
--disable-todoist \
--enable-windows-live \
--enable-google \
--enable-owncloud \
......