Inline Google Docs - SSL required
|Assignee:||Boone Gorges||% Done:|
This related to bug #1396.
In the settings for this plugin, when I enter my gmail account and password, I get a HTTP error. I tried using both my username and by email@example.com and got the same results: "Expected response code 200, got 403 403.4. SSL required."
Is this a problem with https connnections?
I have attached screenshot.
#2 Updated by Boone Gorges 11 months ago
- Status changed from Assigned to Reporter Feedback
I spent a few hours with this plugin last night.
In theory, the plugin is great, and it attempts to do something pretty awesome. But it was clearly written for v1 of the Google Docs API (from 2009); the current version of the API is 3.0. So, while I managed to hack my way around the SSL issue, I wasn't able to use the API class in the plugin to access Doc contents themselves.
I played around a bit, and was able to make a connection using the new API, but it was very much proof-of-concept (and took me about two hours). It would take me dozens more hours to refactor the whole plugin to use the proper APIs. We don't really have the resources for this kind of project at the moment. So I'm suggesting that we uninstall this plugin, and perhaps look for a simpler implementation (like one that uses iframes) for the time being.
Scott, are you aware of any other Google Docs plugins for WP?
#4 Updated by Boone Gorges 11 months ago
Thanks, Matt. Removed in https://github.com/castiron/cac/commit/1759416da3cfc68b4e797a162309a2c917c3db4a
I'll leave this ticket open in case Scott has any suggestions.
#5 Updated by scott voth 11 months ago
Thanks Boone - I looked at a bunch of (poorly named) plugins that have google doc in their name, but really refer to the Google's "doc viewer" - but then tried a plugin that simply allows you to use iframes in a page or post - "IFrame to Embed". I don't know if this would be a security concern or not - but that plugin let me embed a google doc very easily, using shortcodes on a non-Commons site. It seems that when you publish a google doc or form to the web - it always end up with a https url - so I am not sure if that would be an additional issue on the Commons or not. But Google docs provides an iframe embed code that is easy to copy/paste and convert to shortcode. Let me know your thoughts. Thanks.
#6 Updated by Boone Gorges 11 months ago
- Status changed from Reporter Feedback to Rejected
Thanks for the research, Scott.
I do not feel comfortable putting a generic iframe/embed plugin on the Commons, for the security reasons you note.
I find it hard to believe that there's not a single plugin out there that will convert a shortcode into a GDoc embed. I've played with it for the last 15 minutes and I don't think that it would be very difficult to implement. I'm going to close this ticket (as we've strayed from the original issue) and open a new one with the feature request.