Skip to content

A Google Drive sync skips ids outside Drive's alphabet, and a reconnect with another account drops the old folders and grant - #40

Open
gedaiu wants to merge 2 commits into
re-devfrom
feat/google-drive-security-pass
Open

gedaiu wants to merge 2 commits into
re-devfrom
feat/google-drive-security-pass

Conversation

@gedaiu

@gedaiu gedaiu commented Oct 24, 2026

Copy link
Copy Markdown

Brings WaylandYang's security-pass fixes on deeplethe#1386 and deeplethe#1388 into re-dev, the same changes taken as a diff so re-dev keeps the fork migration 9006.

Ids that Drive returns are checked before they reach a query or URL. When the connector reconnects with a different Google account, the old folders are dropped and the old grant is revoked unless another source still uses it, and never for the same account. The ID token's expiry is checked, accounts match ignoring case, and the disconnect confirmation names the Utopia person who connected.

Drive and source tests pass on a fresh database, and so do the web build and tests.

…ct with another account drops the old folders and grant

Signed-off-by: Bogdan Szabo <bogdan@re-cinq.com>
… are known and differ

Signed-off-by: Bogdan Szabo <bogdan@re-cinq.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant