Google triggering 'suspicious app activity alerts' & sign-in triggers 'account recovery flow'

[inakarmacoma]

I'm not 100% certain, but I think I've narrowed the issue to the app. If I enable Google Keep, it works well. Then at some point, I will be logged out of my Google Account due to a suspicious app and activity. When sign back in to the frame inside of Obsidian, using an updated password, it seems to trigger an account Recovery Flow as opposed to a sign in flow. Altogether, this seems odd. Though perhaps there's also some sort of MITM issue going on that's completely unrelated, but filing here in case helpful to the developer or community.

[Ellpeck]

Hi, thanks so much for your issue report! Unfortunately, I am unable to reproduce this issue personally (I've been using Custom Frames for Google Keep & Calendar ever since I originally published the plugin, without any issues), and I haven't heard any other people having an issue like this.

If you haven't already, you should try activating two-factor authentication on your Google account and/or using a much stronger password than you're already using.