OAuth2 auth code flow
- Dominant language
- TypeScript
- Stars
- 40k
- Forks
- 2.4k
- Avg merge
- 2d 13h
- Merged PRs (30d)
- 61
Description
**Describe the bug**
OAuth2 does not work with Google. Have tried both the authorization code flow and implicit grant flow, and both have the same error. The OAuth2 client credentials type in the Google console is "Web application".
```
This browser or app may not be secure.
Try using a different browser. If you’re already using a supported browser, you can refresh your screen and try again to sign in.
```
**To Reproduce**
Steps to reproduce the behavior:
1. Use a request using oAuth2
2. Use Google as the identity provider for sign in
**Expected behavior**
It should work.
**Screenshots**
**Desktop (please complete the following information):**
- OS: Linux
- Installation Method: Flatpak
- App Version: 2021.3.0
**Additional context**
Same issue as https://github.com/Kong/insomnia/issues/2185.
Contributor guide
Research direction
No files, tests, or entry points are named. Start by reproducing the OAuth2 Google sign-in flow in Insomnia 2021.3.0 on Linux via Flatpak and compare the authorization-code and implicit-grant behavior; done means Google sign-in succeeds without the reported browser-security error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- electron, typescript
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100