Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Legacy Google Sign-In JavaScript Library deprecation clarification #859

Open
gr8fuldev88 opened this issue Mar 20, 2023 · 3 comments
Open

Comments

@gr8fuldev88
Copy link

gr8fuldev88 commented Mar 20, 2023

The messaging around deprecation/sunsetting of the Legacy Google Sign-In Javascript Library has been confusing to say the least.

In the following blog post dated August 2021 (which is still linked everywhere, including in this library): Discontinuing Google Sign-In JavaScript Platform Library for web you will find the phrases "plan to fully retire it on March 31, 2023" and "Complete your migration before March 31, 2023". I also found older blog posts and emails that use similar language. They never use the term sunset but certainly make it sound like a sunset.

In contrast, the latest emails (Feb 28, 2023) claim migration is "recommended" AFTER March 31, 2023 and that "Please know that the legacy library will still be available for download by existing clients. A sunset date, after which the legacy library will no longer be available for use, will be communicated in the future."

Also, in all of the latest docs for both authorization and authentication (updated March 13th, 2023) there is a link to this deprecation and sunset page which appears to make very clear that the DEPRECATION date is March 31, 2023 and the Sunset Date is TBD. It then provides links to the same guides for migration for both authentication and authorization.

Can anyone please confirm that use of https://apis.google.com/js/api.js to load gapi.auth2 for use with the Legacy Google Sign-In Javascript Library for authentication and authorization will continue working after March 31st, 2023?

Thank you for your time.

@gr8fuldev88
Copy link
Author

@brdaugherty I would very much appreciate your feedback

@brdaugherty
Copy link

My apologies, third-party cookie deprecation is a wicked hard problem and this is but one manifestation. So I understand it's not easy, nor kind.

Using this library and api.js will continue to work indefinitely (but not forever, nothing last that long).
Here is the list of objects and methods being deprecated. The deprecation & sunset affects only the auth2 module. I wish it was a bit easier to describe, the short of it: there are several modules loaded when src=api.js is used, each of which provides different functionality. The module responsible for downloading the discovery doc, auto-generating the JS API surface, and providing getToken is unchanged and unaffected. The module which handles Auth (both authentication and authorization) is the part which is being deprecated and is affected. If you don't see an object or method listed in the earlier link it won't change in any way.

It's expected that you'll continue to use this library (google-api-javascript-client) if you need to make multiple, chained calls to complex APIs -- this is where a discovery document and auto-generation of the API surface is super helpful, example.

In contrast, if you have only a few API methods to call, using the new gsi/client library and XHR is likely the best route -- keep it simple, right, example.

To clarify on deprecation and sunset; deprecation halts new apps from adoption and terminates support. Sunset will be the big event: breakage. We're still working on what the sunset will look like and when. Until sunset occurs existing apps will continue to function as expected. The caveat being that Chrome's plans to deprecate third-party cookies are when session functionality breaks. The best I can say is stay tuned for more on the sunset dates and impact.

If you want to minimize future risk, migrate sooner, rather than later. If you can't migrate, no worries. For now.

@gr8fuldev88
Copy link
Author

@brdaugherty Thank you very much for your timely and thoughtful response.

Unfortunately, I am using the auth2 module and many of the objects and methods being deprecated but I am relieved to hear that they will continue working after March 31st. I will continue with migration sooner, rather than later.

Thank you again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants