Register Guidelines E-Books Search Today's Posts Mark Forums Read

Go Back   MobileRead Forums > E-Book Software > Calibre > Server

Notices

Reply
 
Thread Tools Search this Thread
Old 03-30-2024, 05:26 PM   #1
MrSamG
Junior Member
MrSamG began at the beginning.
 
Posts: 2
Karma: 10
Join Date: Mar 2024
Device: Android phone
Google Oauth 2.0 for user login

Are there any plans to add Google Oauth 2.0 for user login to the content server? And if not specifically Google, are there any other authentication options?

Apologies I'd this has been asked and answered. I've searched around a lot and search returns are unfortunately overwhelmed with Calibre Web results.
MrSamG is offline   Reply With Quote
Old 03-30-2024, 10:56 PM   #2
kovidgoyal
creator of calibre
kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.
 
kovidgoyal's Avatar
 
Posts: 44,039
Karma: 22669822
Join Date: Oct 2006
Location: Mumbai, India
Device: Various
No, no plans. OAuth only works with browsers, the server is designed to work with non-browser clients as well, hence it uses HTTP auth.
kovidgoyal is online now   Reply With Quote
Advert
Old 03-31-2024, 03:55 AM   #3
MrSamG
Junior Member
MrSamG began at the beginning.
 
Posts: 2
Karma: 10
Join Date: Mar 2024
Device: Android phone
Thanks for the reply.

If it were an option, rather than enabled by default then content server would still work with non-browser clients. Some non-browser clients do get configured to accept it, even bypass it and use normal loggin.

I have OAuth enabled on Audiobookshelf and the app works okay with it.

Anyway, appreciate you response and thanks for all the work on Calibre. It's fantastic.
MrSamG is offline   Reply With Quote
Old 03-31-2024, 05:08 AM   #4
Quoth
the rook, bossing Never.
Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.
 
Quoth's Avatar
 
Posts: 11,763
Karma: 87663463
Join Date: Jun 2017
Location: Ireland
Device: All 4 Kinds: epub eink, Kindle, android eink, NxtPaper11
OAuth is more about Google (or MS) tracking than adding real security.
Quoth is offline   Reply With Quote
Old 04-22-2024, 07:46 PM   #5
giganticfez
Junior Member
giganticfez began at the beginning.
 
Posts: 1
Karma: 10
Join Date: Dec 2022
Device: kindle
Unfortunately, I just got an email for my Google Workspace saying they are doing away with the Less Secure Apps setting in September. So now I'm casting about for a solution that lets me keep using Calibre to email books to my kindles.
giganticfez is offline   Reply With Quote
Advert
Old 04-22-2024, 10:30 PM   #6
kovidgoyal
creator of calibre
kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.kovidgoyal ought to be getting tired of karma fortunes by now.
 
kovidgoyal's Avatar
 
Posts: 44,039
Karma: 22669822
Join Date: Oct 2006
Location: Mumbai, India
Device: Various
https://manual.calibre-ebook.com/faq...-using-calibre
kovidgoyal is online now   Reply With Quote
Old 05-03-2024, 02:17 PM   #7
netchild
Junior Member
netchild began at the beginning.
 
Posts: 8
Karma: 10
Join Date: May 2024
Location: Germany
Device: webserver
Quote:
Originally Posted by MrSamG View Post
Are there any plans to add Google Oauth 2.0 for user login to the content server? And if not specifically Google, are there any other authentication options?

Apologies I'd this has been asked and answered. I've searched around a lot and search returns are unfortunately overwhelmed with Calibre Web results.
Try https://github.com/oauth2-proxy/oauth2-proxy
It sits between a webserver and calibre. It can authenticate against google, azure, and a lot of other oauth / oidc providers. I have it sort of working with a OSS OIDC provider (keycloak) with the caveat that the username is an UUID. No idea what Google will return as the ID of the user. See https://www.mobileread.com/forums/sh...d.php?t=360941 for more info about that.
netchild is offline   Reply With Quote
Old 05-03-2024, 02:25 PM   #8
netchild
Junior Member
netchild began at the beginning.
 
Posts: 8
Karma: 10
Join Date: May 2024
Location: Germany
Device: webserver
Quote:
Originally Posted by Quoth View Post
OAuth is more about Google (or MS) tracking than adding real security.
Wrong in every aspect.

OAuth is a authorization protocol which can be and is implemented by more parties than just those two. There are even multiple OSS solutions which you can host yourself if you want to.

And it is real security on the protocol level (authorization against a 3rd party, in the sense of "not build-in authentication"). And it adds to authentication (which is not the same as authorization) when a multi-factor authentication is used (which is up to the config of the backend and doesn't need support at all in the client).
netchild is offline   Reply With Quote
Old 05-03-2024, 04:45 PM   #9
Quoth
the rook, bossing Never.
Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.Quoth ought to be getting tired of karma fortunes by now.
 
Quoth's Avatar
 
Posts: 11,763
Karma: 87663463
Join Date: Jun 2017
Location: Ireland
Device: All 4 Kinds: epub eink, Kindle, android eink, NxtPaper11
Quote:
Originally Posted by netchild View Post
Wrong in every aspect.

OAuth is a authorization protocol which can be and is implemented by more parties than just those two. There are even multiple OSS solutions which you can host yourself if you want to.

And it is real security on the protocol level (authorization against a 3rd party, in the sense of "not build-in authentication"). And it adds to authentication (which is not the same as authorization) when a multi-factor authentication is used (which is up to the config of the backend and doesn't need support at all in the client).
It's not actually extra security and a big corporation is using it in most cases to track and control.

It's not needed.
Quoth is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Kindle can't login to google madbooks Amazon Kindle 16 10-17-2021 04:23 PM
Calibre can't access DB from Standard User, but does from Admin User (Win10) medownunder Library Management 10 06-01-2021 08:54 PM
Google Play store & multi-user support avantman42 Kindle Fire 11 04-11-2013 08:17 PM
Handling oAuth APIs tBunnyMan Recipes 4 11-29-2012 03:15 AM
Can you save Google or Youtube login information? Ticallion Kindle Fire 7 12-13-2011 06:09 AM


All times are GMT -4. The time now is 11:05 PM.


MobileRead.com is a privately owned, operated and funded community.