[FFe] [MIR] unity-lens-photos in quantal
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Unity |
Fix Released
|
Undecided
|
Unassigned | ||
python-oauthlib (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
unity (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
unity-lens-photos (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
This bug is split off from MIR bug 1029549 (about online-accounts and friends).
The security review revealed two blockers:
* Flickr needs to use the secure API
* Can't embed oauth2.py
I'll leave aside the Flickr issue for now, since that is an upstream bug fix issue.
For oauth2... We have two modules in Ubuntu: python-oauthlib (main, python2-only, unclear oauth2 support) and python-oauth2 (universe, python2-only)
We also have several ways to move forward:
1) Port python-oauthlib to python3; update it to its latest release, which claims oauth2 support; and port unity-lens-photos to oauthlib instead of oauth2.
2) Port python-oauth2 to python3; promote it to main.
3) Port unity-lens-photos to python2 and oauthlib; port it back to python3 for 13.04
I view #1 as the Long Term Right Way and #2 and #3 as viable Short Cut Ways if the release team prefers those for expediency's sake.
Related branches
- David Callé (community): Approve
-
Diff: 988 lines (+20/-904)5 files modifiedMANIFEST.in (+0/-2)
setup.py (+0/-2)
src/flickr_scope.py (+20/-18)
src/oauth2.py (+0/-864)
src/oauth2_version.py (+0/-18)
summary: |
- [FFe, MIR] unity-lens-photos in quantal + [FFe] [MIR] unity-lens-photos in quantal |
tags: | added: ffe |
Changed in unity: | |
status: | New → Fix Released |
To be clear, I'm starting down the path of #1 until told otherwise.