Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

why does this app continously request access to my google account? #460

Closed
JackDotJS opened this issue Dec 25, 2022 · 24 comments · Fixed by #463
Closed

why does this app continously request access to my google account? #460

JackDotJS opened this issue Dec 25, 2022 · 24 comments · Fixed by #463
Assignees
Labels
bug A bug! Fixing it is a priority

Comments

@JackDotJS
Copy link

im loving this app so far. it works perfectly for my needs, especially with the widget functionality. but for some damn reason, every time i open it and do anything, i get the notification in the above image. it's a system notification, so it can't be dismissed or turned off.

i tap "deny" but it still comes back every time. the cycle repeats.

why does this app even need access to begin with? why does it keep asking despite me denying it?

@CampelloManuel
Copy link
Collaborator

CampelloManuel commented Dec 26, 2022

Hi, thank you for reaching out. A few questions, if you don't mind:

  • what app version ? 7.0.0 from f-droid ?
  • what device ? google, xiaomi, samsung, motorola ?
  • what android version ? I assume android 13 ?
  • did you install any mod, root, xposed software ?
  • the notification really does not go away if you dismiss it ~ 5 times ?
  • did you have version 5.7.1 previously ? or did you install only 7.0.0 ?

Possibile causes:
There is some code for google tasks synchronization that I did not delete yet. I guess it's asking for the google account. I have no idea why, I removed all account permissions and It doesn't happen in my emulator. Don't worry about privacy, I removed all network permissions and the network code doesn't run, so the app is 100% offline. Yeah it asks for the google account, but the code that uses it does not work. Also I can't replicate this. It may be due to the manufacturer doing something weird ?

Solutions

  • the quick solution could be to hold your finger on the notification and disable it when the settings panel shows up. but maybe android doesn't allow it ?
  • the good solution is to wat a few days for me to completely remove google task code. It felt like a waste to delete it, but it causes 100% of the bugs reported here in github

Please answer all my questions so that I can identify the source of the bug.


Also, since you like the widget, do you have any requests or suggestions on how to improve it ?

@CampelloManuel CampelloManuel self-assigned this Dec 26, 2022
@CampelloManuel CampelloManuel added the bug A bug! Fixing it is a priority label Dec 26, 2022
@CampelloManuel
Copy link
Collaborator

@JackDotJS also, f-droid recently got the 7.1.0 update. Can you tell me if the problem appears also on that version ?

@Rawng
Copy link

Rawng commented Dec 26, 2022

I also have this issue. Android version 12 on a Samsung phone. No mods or roots etc installed. The notification does go away when I dismiss it, but returns periodically. I installed 7.0.0 from fdroid and updated to 7.1.0 just a bit ago. The update does not appear to have fixed the issue, though the changelog in the app doesn't show 7.1.0 so I don't know if I'm still running some kind of cached version. The app also requests permission to every google account on the phone.

Some light testing leads me to think the request is triggered upon saving a note when exiting the note entry screen.

This was referenced Dec 26, 2022
@JackDotJS
Copy link
Author

@CampelloManuel thanks for getting back so quickly! hope you had a great holiday/weekend 😄

  • up until now, i was using 7.0.0 from f-droid. 7.1.0 does not fix the issue.
  • i'm on a google pixel 7 pro running GrapheneOS. it's android 13.
  • the notification has come up well over 10 times now.
  • this was fresh install since I just got this phone for christmas. 7.0.0 was the oldest version i had

i can also confirm @Rawng's theory. the notification seems to get triggered mainly when saving or deleting notes.

@JackDotJS
Copy link
Author

Also, since you like the widget, do you have any requests or suggestions on how to improve it ?

i almost missed this part! sorry!

i do have one major suggestion, which is an option to show completed tasks. being able to know at a glance what is and isn't done would be very nice imo.

more color options would also be nice. the only options right now are between "light" and "dark", and they don't even affect the widget header.

i could put these suggestions in their own issues if that'd be better for you guys.

@CampelloManuel
Copy link
Collaborator

CampelloManuel commented Dec 27, 2022

In a few days I will publish an update on f-droid, that should fix this problem.

... maybe. I still don't understand the cause, and I can't replicate it on my emulator.


I wrote the widget suggestions in #387 so one day I'll work on those.

@connect2400
Copy link

Hi, thank you for reaching out. A few questions, if you don't mind:

  • what app version ? 7.0.0 from f-droid ?
  • what device ? google, xiaomi, samsung, motorola ?
  • what android version ? I assume android 13 ?
  • did you install any mod, root, xposed software ?
  • the notification really does not go away if you dismiss it ~ 5 times ?
  • did you have version 5.7.1 previously ? or did you install only 7.0.0 ?

Possibile causes: There is some code for google tasks synchronization that I did not delete yet. I guess it's asking for the google account. I have no idea why, I removed all account permissions and It doesn't happen in my emulator. Don't worry about privacy, I removed all network permissions and the network code doesn't run, so the app is 100% offline. Yeah it asks for the google account, but the code that uses it does not work. Also I can't replicate this. It may be due to the manufacturer doing something weird ?

Hi Manuel,
I just installed the app a couple days ago and I'm liking it so far too. But I have the same kind of complaint as here, with slightly different circumstances, so I thought I'd put my two cents in to help the developer make the most appropriate changes.
I have multiple Google accounts registered on my unrooted Moto G Pure running Android 11 and version 7.0.0 of NoNonsense Notes from F-Droid. I approved permission to access one Google account, assuming it's for backup purposes, but I denied others; there's no legitimate reason the app could need access to ALL Google accounts.
Dismissing the notification (which arises only for the unapproved accounts) only shuts it up for a few minutes. It asks again indefinitely.
This is actually not only annoying but concerning. I recommend that you not only kill whatever process is spawning these notifications -- if the user wants to change access he can bring up the prompt himself in the app native settings -- but add some explanation within the same location as to why access is needed and how access is used (including frequency), if not options for managing the app's usage of Google Drive, etc.
Even if the app needs to sync files for legitimate reasons, it doesn't need to do it every five minutes. I don't make changes to my to-do list that often.
Thank you for your attention to this project. Please let me know if you have any questions or if there's anything I can do.
connect2400

@connect2400
Copy link

P.S. I see you mentioned Google Drive isn't actually being used anymore. I didn't realize this; I want cloud backup. So that feature is not present, and not coming back?

@CampelloManuel
Copy link
Collaborator

@connect2400

Dismissing the notification (which arises only for the unapproved accounts) only shuts it up for a few minutes. It asks again indefinitely.

That notification should not even appear in the first place.
The app code that reads google accounts is just laying there, waiting to be deleted. There ARE functions that check which accounts are present on the device, but nothing can call those functions, as far as I understand.

I recommend that you not only kill whatever process is spawning these notifications

I agree, the problem is that I can't find out which code spawns those

This is actually not only annoying but concerning

If it helps, i don't ask for the internet permission exactly to avoid worries. So yeah, I agree that it looks concerning, and fixing this is a priority.
As of now there is no functionality in this app that needs a google account, so i agree that you should deny access.

So that feature is not present, and not coming back?

the app used to have google tasks sync (not google drive, as far as I know) but it's difficult to make it work, and it's a source of problems just like this one. I just wanted to wait and see if someone shows up to work on it, but I guess I'll just remove it.


I added a setting in the next app version (which will be in f-droid in a few days) to enable sync features, but it will be off by default, so no sync code will run at all, unless the user explicitly enables this.

If that still does not work, I'll just delete all code that may be reading google accounts. This is just leftover code for old features, and we were planning to delete it anyway.

@CampelloManuel
Copy link
Collaborator

Also:

@CampelloManuel
Copy link
Collaborator

@Rawng @JackDotJS @connect2400
Version 7.1.1 of NoNonsense Notes is live on f-droid and it should fix this bug.
I'd like all of you to confirm if the problem still exists in the latest version.
Thank you.

@connect2400
Copy link

connect2400 commented Jan 3, 2023 via email

@JackDotJS
Copy link
Author

updated! but it seems the update hasn't changed anything in my case :/

ive even restarted my phone just for good measure, but no luck. denying the permission also still does nothing, if anyone happens to wonder.

@JackDotJS
Copy link
Author

also just tried a complete re-install, still nothing.

@spacecowboy
Copy link
Owner

@CampelloManuel you should delete GoogleTasksClient.java this is where the account permission is originating from. Specifically the OAUTH_SCOPE. I admit I can't find the reference to it but deleting it should reveal that

@CampelloManuel
Copy link
Collaborator

Ok. I just removed all google tasks functionality in #474 and now the app should not access any account anymore. The update will be available in f-droid in a few days

@connect2400
Copy link

connect2400 commented Jan 4, 2023 via email

@CampelloManuel
Copy link
Collaborator

New update is out. Please tell me if the google account popup is still there.

@JackDotJS
Copy link
Author

nope, still there for me. fresh install once again for good measure but no change. :(

@CampelloManuel
Copy link
Collaborator

I see.
Does the logcat say anything ?
(here is a guide on how to make a logcat )

@JackDotJS
Copy link
Author

i'll try setting up that logging later today

@JackDotJS
Copy link
Author

well i managed to get something... maybe probably.
the log was getting spammed like crazy from all sorts of crap so good luck sifting through this lol

logcat.txt

@JackDotJS
Copy link
Author

can confirm! new update has finally fixed it 😄
thank you so much @CampelloManuel!

@CampelloManuel
Copy link
Collaborator

Good. Others confirmed by email that it works for them, too.
The problem was AbstractThreadedSyncAdapter being started in a background service: that was requesting access to every google account, it looks like.
I'll be careful if we ever add something that requires a google account,
but since that's not planned, I think this problem is solved.

@CampelloManuel CampelloManuel unpinned this issue Jan 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug A bug! Fixing it is a priority
Projects
None yet
Development

Successfully merging a pull request may close this issue.

6 participants
@spacecowboy @Rawng @CampelloManuel @JackDotJS @connect2400 and others