Addon icon indicating copy to clipboard operation
Addon copied to clipboard

Google OAuth 2.0 broken in 1.24.1 with tracking injection turn on (default settings)

Open kevinvalk opened this issue 2 years ago • 0 comments

With version 1.24.1 and default settings you are unable to perform OAuth 2.0 API requests. For example getting the events for a calendar. When you use the "Try this method" you will get the following error: image

When I turned off the prevent tracking injection settings, everything is fine and dandy again!

Prevent tracking injection over history API (See also: The replaceState() method)

I think it is because the OAuth URL is being rewritten.

This is the approval URL (full) WITH prevent tracking injection: https://accounts.google.com/signin/oauth/consent/approval?hl=en&_reqid=<REDACTED>&rt=j

This is the approval URL (full) WITHOUT prevent tracking injection: https://accounts.google.com/signin/oauth/consent/approval?authuser=0&as=<REDACTED>&hl=en&_reqid=<REDACTED>&rt=j

kevinvalk avatar Jun 28 '22 07:06 kevinvalk