library icon indicating copy to clipboard operation
library copied to clipboard

Default OAuth redirect URI's break with Google's new validation URLs that require https

Open ChrisC opened this issue 3 years ago • 1 comments

Problem Description

The default redirect URI in the userAuth module uses http by default. Google is now enforcing https when creating Redirect URI for OAuth Clients, so the app will throw errors when trying to authorize users if you update the OAuth client config or create a new one in GCloud.

Feature

Maybe do away with the default callback url and require users to explicitly set the REDIRECT_URL in the .env file? It's not well documented in the README that you can already override the default callback URI.

Additional Information

See Google's updated OAuth requirement and validation rules.

ChrisC avatar Jun 09 '21 15:06 ChrisC

Setting REDIRECT_URL did the trick in the meantime. Thanks!

jpmckinney avatar Jun 11 '21 15:06 jpmckinney