Google SSO

[baha-moonen]

Hi @GDay,
I installed ChiefOnboarding:latest in Docker.
Everything is working, looks like a great tool!
However, I try to enable Google SSO and followed the docs to accomplish this.

• created new Google project
• setup client_ud
• etc.
• added environment variables to socker-compose.yml
• restared stack (pull and redeploy)

Nothing happened.

Also entered client id and client password in Settings > Integrations > Google login.
Again nothing happened.

Am I doing something wrong?

Thanks in advance.

Bart

[baha-moonen]

Addition to org post: there is nothing in the container logs and nothing in Chrome 'Inspect'

[GDay]

Weird. It's working fine for me:

redirect_uri=https://<>.com/accounts/google/login/callback/?flowName=GeneralOAuthFlow 

Just released a new version which hopefully forces https for these urls. Let me know if that worked.

[rg-ast]

I'm seeing the same issues here. Been completely unable to log in using Google SSO. Saw the same thing @baha-moonen saw (http in the error message when we're actually using https) a few days ago, now I just get a big old "Server Error (500)" when I try to log in using Google SSO. Hope to see this working in the future

[GDay]

Are you running the latest version? This is really weird as I cannot seem to reproduce the issue on my side.
Do you have sentry installed? if so, I would love to learn more about the 500 error.
I don't think stack traces of 500 errors show up in the logs, but might be worth a try. Could also be helpful to know what url gives you the 500 error.

Hope to see this working in the future

Yes! But I need more info to figure out why this isn't working for you.

[rg-ast]

Are you running the latest version?

Yes, we're on the latest version here (v2.3.1)

Do you have sentry installed?

I don't think I even know what sentry is (without searching).

Could also be helpful to know what url gives you the 500 error.

https://sub.mydomain.org/accounts/google/login/callback/?state=xXx000xXX&code=4%xXx000xXXxXx000xXXxXx000xXXxXx000xXX_xXx000xXXxXx000xXX_xXx000xXX_xXx000xXX_xXx000xXX&scope=email+profile+openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile&authuser=0&hd=mydomain.org&prompt=none

(hopefully you can make sense of what I removed/replaced, but let me know if somehow that is needed)

Yes! But I need more info to figure out why this isn't working for you.

Fair point :) Thanks for you're help!

[GDay]

Thanks, there is a fix for this in master.

[GDay]

The docs are not in line with the latest docker version. There have been quite a few updates since, the software in master is way ahead of the latest docker version. Sorry about that. Will release a new docker version ASAP.

[baha-moonen]

Thanks for the update and swift response. Any way I can be of any assistance?

[GDay]

There is a fix for this in master.