Google Drive repo verification

Google Drive repo verification

Michelle Melton -
回帖数:5
Core developers的头像 Plugin developers的头像
We have been jumping through many, many hoops to get our Google Drive repo integration verified with Google. The latest is we need to either complete a CASA Tier 3  security assessment (which can take 6 weeks, on top of the months we have been going back and forth with Google) or remove the .../auth/drive scope and only use the ../auth/drive.file scope, however Moodle specifies the former for the integration.

Has anyone been through the process recently and can advise on what can be done to actually complete the verification process?
回复Michelle Melton

Re: Google Drive repo verification

Ken Task -
Particularly helpful Moodlers的头像
Just so you have an answer ... a few months ago I got a notice from Google about their plans to 're-certify' (although that wasn't the term they used) my IAM apps - Drive included.   Was shocked to read they required submission of a video as part of that process.   And they warned it would take a long time ... but have to confess, 6 mo. is too long to me!

Anyhoo ... I didn't opt to participate because of the 'consequences'/warnings they described if I didn't ... the notice that one sees when authenticating would say something to the affect 'it wasn't trusted' ... I can 'live' with that!

So far, guess they haven't gotten round to me yet - speck of sand in a very large beach I guess.   Haven't seen that yet on sites using Google Oauth2.

Did have an issue with GCE hosted sites recently loosing attached data disk but there was a doc provided by them that resolved the issue.

Your Drive access is still working, is it not?

'SoS', Ken

回复Ken Task

Re: Google Drive repo verification

Michelle Melton -
Core developers的头像 Plugin developers的头像
Thanks for the reply Ken! I appreciate the feedback!
回复Michelle Melton

Re: Google Drive repo verification

Helen Foster -
Core developers的头像 Documentation writers的头像 Moodle HQ的头像 Particularly helpful Moodlers的头像 Plugin developers的头像 Testers的头像 Translators的头像

Thanks Michelle for creating a tracker issue for reducing the scope for Google OAuth app verification - MDL-80447 - if anyone wants to watch, vote or comment on it.

回复Ken Task

Re: Google Drive repo verification

Julian Howarth -
A site I manage is also being asked to submit for re-verification.
I'm considering dropping the drive integration altogether but I'm not clear on how to do that cleanly and may still need to submit for verification because we use the oauth2 for logging into the site.

Is this not becoming a problem for other moodle admins?
回复Julian Howarth

Re: Google Drive repo verification

Ken Task -
Particularly helpful Moodlers的头像
@Julian ...maybe others in this thread ...

I think, at first, they were strict about this ... but now, offer a way to connect/use anyway ... IF the user is willing to "accept the risk".   Kinda like Firefox and you go to a site with https but site is using self-signed certs.

I'll send you a url via PM.    Trust me! 微笑

'SoS', Ken