5 files changed, 61 insertions, 17 deletions
diff --git a/metadata/news/2021-08-11-oauth2-creds-chromium/2021-08-11-oauth2-creds-chromium.en.txt b/metadata/news/2021-08-11-oauth2-creds-chromium/2021-08-11-oauth2-creds-chromium.en.txt
new file mode 100644
index 000000000000..0d7a8aca1995
--- /dev/null
+++ b/metadata/news/2021-08-11-oauth2-creds-chromium/2021-08-11-oauth2-creds-chromium.en.txt
@@ -0,0 +1,44 @@
+Title: OAuth2 Credentials Removed from Chromium
+Author: Jason A. Donenfeld <zx2c4@gentoo.org>
+Posted: 2021-08-11
+Revision: 1
+News-Item-Format: 2.0
+Display-If-Installed: www-client/chromium
+
+In March of this year, Google announced that OAuth2 credentials would be revoked
+for distros shipping Chromium. This was covered in multiple places at the time,
+such as [1,2,3]. Around that time, with 89.0.4389.82, Gentoo removed OAuth2
+credentials from its packages. However, they slipped back in shortly after.
+
+As a result, some users [4] have found that recently Google's SSO does not
+persist between browser sessions; e.g. you have to log back into GMail every
+time you open your browser. This week's changes [5] restore the old behavior
+we had in March, of not shipping Gentoo OAuth2 credentials.
+
+If you find that certain Google services are no longer working, you may wish to
+supply OAuth2 credentials manually, obtained by following the instructions at
+[6]. However, even without supplying such credentials, Google's SSO should now
+be working as expected.
+
+There are now two options for passing these credentials to Chromium via
+
+/etc/chromium/default:
+
+  1. GOOGLE_DEFAULT_CLIENT_ID and GOOGLE_DEFAULT_CLIENT_SECRET environment
+     variables:
+       export GOOGLE_DEFAULT_CLIENT_ID="<client-id>"
+       export GOOGLE_DEFAULT_CLIENT_SECRET="<client-secret>"
+
+  2. --oauth2-client-id and --oauth2-client-secret= command line switches:
+       CHROMIUM_FLAGS+=" --oauth2-client-id=<client-id>"
+       CHROMIUM_FLAGS+=" --oauth2-client-secret=<client-secret>"
+
+Alternatively these environment variables and command line switches may be given
+at the command line for ad-hoc testing.
+
+[1] https://archlinux.org/news/chromium-losing-sync-support-in-early-march/
+[2] https://bodhi.fedoraproject.org/updates/FEDORA-2021-48866282e5
+[3] https://hackaday.com/2021/01/26/whats-the-deal-with-chromium-on-linux-google-at-odds-with-package-maintainers/
+[4] https://bugs.gentoo.org/791871
+[5] https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=fce48ef271bbcaee9afdf0481294da167e665a9b
+[6] http://www.chromium.org/developers/how-tos/api-keys
diff --git a/metadata/news/Manifest b/metadata/news/Manifest
index d18152cc2869..758829127fde 100644
--- a/metadata/news/Manifest
+++ b/metadata/news/Manifest
@@ -1,23 +1,23 @@
 -----BEGIN PGP SIGNED MESSAGE-----
 Hash: SHA512
 
-MANIFEST Manifest.files.gz 13475 BLAKE2B 78672f657c8cd4903e8ecebdb7be6f976c894b3bae286d6dcd5ed5d92f2d0b3f9691c2b4965adb146feb9b29def2b8fb038da3256ba9273197c72de6caa123b3 SHA512 d0fe055f8f6681873a2f4a0a5f219c015cfe8b366b8105534e1272abaad74a581e4d9c8f69db1599303c15acec1eed9bf84545aaaef82424fc60d9119b5f798f
-TIMESTAMP 2021-08-06T22:39:09Z
+MANIFEST Manifest.files.gz 13663 BLAKE2B 000c90580d9aaa7c7ce0a2d16b97742e7ec743a96aa84164226a75080b69ebd4035bda6d2a247b95d413d4e5519450be384b168ee4a313b3cde307012ddd86bb SHA512 15b5534ef9b5c5fe76a13c365e6d1847921d9de0e4ddf7dc48e1c479352acc895b287fd6a36537a3e84163a67b920fb865b4ea6bd1b7daf5019680477f3032a5
+TIMESTAMP 2021-08-11T05:39:16Z
 -----BEGIN PGP SIGNATURE-----
 
-iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmENug1fFIAAAAAALgAo
+iQKTBAEBCgB9FiEE4dartjv8+0ugL98c7FkO6skYklAFAmETYoRfFIAAAAAALgAo
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEUx
 RDZBQkI2M0JGQ0ZCNEJBMDJGREYxQ0VDNTkwRUVBQzkxODkyNTAACgkQ7FkO6skY
-klC2FhAAlpk/kOSGdxVfZBcPNViBkrFnClwolvWqvlftINb6h+PLy83apmBOu0wl
-6piGS4drYUqHCI/Ca2hVet5qnN4/L59W+8tJoOhGulHrMQNx0cRwLmJJzFsUSM86
-ax57eTxFd5nVuE9hsh3sAjjbH6K4fsb0GGWLl0AMQijyl2C6GEDp0e1UV5YA8mO/
-yDIHKVr1Hovl44Z4BXDBGaVG4E1B5f0fWFn/oF6f9OapJA0KwOLPApT+VKPdcAA0
-a8iC0tgyz2M2Fq+Q4J5TH9j8c/fBARKyYgVYHVuyjjmY8ry9iZn3Xs2LZ33+UhOn
-z4K6d/3+ScEIty8UKCbsQZdN8GoCd528wlfOWqsU9BBtcrhR4h9lhdf1u8sEqx7+
-nMbB923O/WreTx8E+igTlo2iH3KdIRbJD05f4OG3JO4jA+k+QtRKLLDw7gYTxt6i
-wZzdNUA4x9XzgJ4nMgJxtZBLioWogOEOjxeXgBBl5BOw7Ck1Al8vIbd2iADYkj3W
-GsiuO/WPELWBwK3vBIMy4k/RBzjgxzY1WyTg0dCQOsImvwMe9eFy5uQhOS61FuVu
-jWHmvkQML2VQdebPxeAs9rP3NNvYHbiOrzvJONUGQZ/9OWuixP/OTCatlMUqeYwI
-gellBfjTAkgaiGmLgZ3DDVp6r4z+qC0jcEEvCSBqUTT7f0SfZLU=
-=/gcu
+klC2FQ//eNj28i8x70Qkyyz1QUkFbil7849Qeg0dcaJodW31JPiKs/FhO+gUD23Y
+djJH7HzhYBoBvCZm4G6Zq41Jh2XZ2gTdDwru616SAur+C0akbxwrmuOLLX3MNC6a
+qDmGUv754pft05T8+gjzVBgKonsYhlhxYDcBXQn/q+rUg6z/KcE0i0qsURbXxe+W
+WC4YTm2npUCMKKBbLbjyXmMVkHKFP6/rBZl7JHO8VUOVYJWuQcgf79t/nLgDt+jp
+BQ5E7NiqCi7riZWRqigAS3GtROa5v5YpLFZNCv86NKJD5jzSAHl0V5EZ4wQvKM2C
+jZqNIUxkt1MYnJzHgsr+A3EI3pk11OBXDJtAjOcpNbaJFFwhxEuXqBW7REOIzOjE
+FmwoxFdT2N8YmTb5oHJB65tO7JgOnms+haOJo8koWLfr7iRz3bA0gLt7HqqPYCqy
+t4xNHj+5vwXiqIZEKvSMMojSiM1O3Ndu4zYGGag3J7tutMaG9YkpfLmK6S1BhLw1
+D5RJBau7KjEgrVJMqDh5f0EYRynklV8UavNH5ogbExXDR4NuB2TJZSalJMviTEGa
+cOujsAmvmKFVAc9nzmnXOMzIER5QfBR39A2KPCxX8jSurQF5ktboJyH/cmwm8E9u
+OMVJ1In6b++3cbF617kX7Akok+K0dXf4hilVy7wxV87JUvIOa+g=
+=reTW
 -----END PGP SIGNATURE-----
diff --git a/metadata/news/Manifest.files.gz b/metadata/news/Manifest.files.gz
index 81c1ae82950c..703ef863b75f 100644
--- a/metadata/news/Manifest.files.gz
+++ b/metadata/news/Manifest.files.gz
diff --git a/metadata/news/timestamp.chk b/metadata/news/timestamp.chk
index 83824d5db7d0..2127564ec599 100644
--- a/metadata/news/timestamp.chk
+++ b/metadata/news/timestamp.chk
@@ -1 +1 @@
-Fri, 06 Aug 2021 22:39:05 +0000
+Wed, 11 Aug 2021 05:39:12 +0000
diff --git a/metadata/news/timestamp.commit b/metadata/news/timestamp.commit
index b17266d04945..0d95781940d5 100644
--- a/metadata/news/timestamp.commit
+++ b/metadata/news/timestamp.commit
@@ -1 +1 @@
-6e9873c02074cbbe1fb75e7c6a216f216185b62d 1627846494 2021-08-01T19:34:54+00:00
+0a960c2aadd2b98513ada135c437d8a6701e1f84 1628643406 2021-08-11T00:56:46+00:00