Page MenuHomePhabricator

Need a Google Organisation to setup Google OAuth login on photo uploader to Commons
Closed, InvalidPublic

Description

Google drive to Commons was a Wikimania-Hackathon-2019 project to allow Google logged in users to directly upload photos from their Google drive to Wikimedia Commons. The app is deployed currently in https://tools.wmflabs.org/google-drive-photos-to-commons/

However, to make it public (specially to get the Google app verified), Google has mentioned the following:

In addition, you will need to associate your project with your organization by following the steps below:

1. If you have not already done so, create an Organization by following the Quickstart Using Organizations instructions [https://cloud.google.com/resource-manager/docs/quickstart-organizations].
2. Migrate the project into the organization you created as shown in Migrating Existing Projects into the Organization. [https://cloud.google.com/resource-manager/docs/migrating-projects-billing]

Currently, the app is not connected to an Organization and built under my (01tonythomas@gmail.com) Google Console view.

Is there a way that we can create a Google Organization for Wikimedia Tool labs and test projects that can be reused later for all OAuth logins on trusted apps running on the Wikimedia cluster ?

@srishakatux thoughts ?
https://gsuite.google.com/pricing.html shows that the basic plan is 6 USD per month for an organization. We might just need one user so this is good enough.

More detailed response from Google: https://github.com/tonythomas01/gdrive_to_commons/issues/13#issuecomment-497780717

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJun 8 2019, 9:30 PM
01tonythomas updated the task description. (Show Details)Jun 8 2019, 9:31 PM

Argh... restoring .

Basically: Is this possible? Does this make sense? If both, who to sort out budget?

Argh... restoring .
Basically: Is this possible? Does this make sense? If both, who to sort out budget?

If I'm reading the response from Google pasted at https://github.com/tonythomas01/gdrive_to_commons/issues/13#issuecomment-497780717 correctly, I think that attaching the app to a Organization account will make it such that only Google accounts that are attached to the same Org account will be able to use it. They seem to be saying that your landing page needs to have more information about what the app does and why for them to approve it for public use. Seems reasonable to me since the current UI only says "Upload your photos from Google Drive to Wikimedia Commons!" and nothing else about why you would do this and what the implications are.

There are more details on the Google side of this process at https://developers.google.com/apps-script/guides/client-verification.

The app probably also needs the disclaimer from https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#If_my_tools_collect_Private_Information... to be more prominent. I see it is used in https://tools.wmflabs.org/google-drive-photos-to-commons/privacy-policy/, but the TOU states that this information must be shown to the user before collecting private data, not just available via some URL.

Good one @bd808. I missed that the In addition, part was an addition to in-org use case.

I will update the ToC and other things and lets see if we make it through. At this point, I will close this task as invalid then.

01tonythomas closed this task as Invalid.Jun 16 2019, 9:13 AM