ACCOUNT_GUIDELINE.md

Real Accounts

For tasks including google or google drive, we need a real Google account as well as configured OAuth2.0 secrets.

Attention: to prevent environment reset and result evaluation conflicts caused by multiple people using the same Google account simultaneously, we will not provide the public test accounts available. Please register a private Google account.

Table of Contents

1. Register A Blank Google Account
2. Create A Google Cloud Project
3. Configure OAuth Consent Screen
4. Create OAuth2.0 Credentials
5. Potential Issues

Register A Blank Google Account

1. Go to Google web site and register a blank new account

• In this testbed, you do not need to provide any recovery email or phone, since we only use it for testing cases
• Just IGNORE any security recommendations
• Shut OFF the 2-Step Verification to avoid failure in environment setup (requesting phone verification code)

Attention: we strongly recommend that you register a new blank account instead of using an existing one, in order to avoid messing up your personal workspace.

2. Next, copy and rename the template file settings.json.template into settings.json under folder evaluation_examples/settings/google/. Remember to replace the two fields email and password:

• these two fields are used to simulate real people login to Chrome browser during environment setup for relevant examples in the virtual machine

{
    "email": "your_google_account@gmail.com",
    "password": "your_google_account_password"
}

Create A Google Cloud Project

1. Navigate to Google Cloud Project Creation page and create a new GCP (see Create a Google Cloud Project for detailed steps). You can use any project name.

2. Go to the Google Drive API console and enable the GoogleDrive API for the created project (see Enable and disable APIs for detailed steps)

Configure OAuth Consent Screen

To configure the OAuth2.0 screen for the created GCP. Go to page OAuth consent screen:

1. For User Type, choose "External" and click "Create"

2. For App information, type in any App name you like (e.g., DataAccess), and choose the current Google gmail into field User support email.

3. For Developer information, also fill in the current gmail account. Leave other fields blank and click button "SAVE AND CONTINUE".

4. Leave fields blank for Scopes and continue to Test Users. Add the current gmail account via clicking button "+ ADD USERS".

5. Finish all configuration and we will come to the configured OAuth consent screen. There is another thing, PUBLISH APP to extend the lifecycle of credentials. Otherwise, the refresh token is only valid in 7 days (refer to google offical doc and stackoverflow post for details).

Create OAuth2.0 Credentials

1. Goto the credentials page, click "CREATE CREDENTIALS -> OAuth client ID"

2. For Application type, please choose "Desktop app". You can use any Name. And click "CREATE".

3. Now, in the pop-up window, you can download the JSON file client_secret_xxxxx.json. Move and rename this .json file to file path evaluation_examples/settings/googledrive/client_secrets.json in the OSWorld project. The folder should look like:

- evaluation_examples/
  - settings/
    - google/
      - settings.json
      - settings.json.template
    - googledrive/
      - settings.yml
      - client_secrets.json

4. Note that, when you first run a task including Google Drive, there will be a url requesting your permission. Open the link in unsafe mode using the gmail you filled in evaluation_examples/settings/google/settings.json, authorize and confirm your choice once for all. Eventually, you will see a prompt message "The authentication flow has completed." in a blank web page.

Potential Issues

Due to strict check by Google safety teams, even if we shut down the 2-step verification, Google still detects potential risks of your account, especially when you frequently change the login device. You may encounter the following issues:

Phone Verification Code Required

When the VM tries to log into the Google Drive page, Google requests you to provide a phone number and verfification number. This may occur when you change your IP or device for the first time.

To solve it, typing any phone number is adequate (since we shut off the 2-step verification and do not provide any recovery phone number). And fill in the received verification code. After that, hopefully, Google will remember this new login IP or device. Now, you can restart the task, and in this time, it should work.

Identity Verification

In this case, Google does not give you the chance to use phone verification code. Since we do not provide any recovery email/phone and shut down the 2-step verification, we are unable to login from the new device. We hypothesize that this problem may occur when you frequently change the login IPs or devices, such that Google detects the unusual usages. The only solution is to reset the password from the device in which you register this Google account.

Sadly, we do not have a permanent solution. The only suggestion is not to frequently change your login IP or device. If you encounter any problem above, Google may urge you to change the password. Also remember to update the password in evaluation_examples/settings/google/settings.json.