google oauth2

[jovial solstice]

hey folks

I am getting User (role: guests) missing scope (account)"

which seems to be a fairly common issues

1. I attempt login with google oath, then fails and redirects me back each time
2. google oath says it can take weeks for my oath scope and app to be approved, could this be it?

Here is my appwrite config, using oath2 with google

console.log(OAuth2Provider)
const url = import.meta.env.VITE_APPWRITE_ENDPOINT;
const project = import.meta.env.VITE_APPWRITE_PROJECT;

const client = new Client();

client
    .setEndpoint(url)
    .setProject(project);

export const account = new Account(client);

account.createOAuth2Session(
    OAuthProvider.Google,
    'https://main--videogame-selector.netlify.app',
    'https://main--videogame-selector.netlify.app/',
    ['https://www.googleapis.com/auth/userinfo.email']
);

am i missing something?

1. Ive enabled all roles for each collection on my appwrite platform
2. I created oath2 with google, passed corrrect id and key to google and apprwite

google oauth2

[mighty light]

What's your Appwrite endpoint vs your app's url?

It's probably a 3rd party cookie problem.

For local development, maybe you can change your browser settings to enable 3rd party cookies.

In production, you'll need to use custom domains

[hardy lance]

I am currently facing same issue. And it's in prod but it doesn't happen for everyone testing the app, it has only happened for 1 person so far.

When I run the process in my end, it works well but when she does it on her end it doesn't work.

Even signing up with email returns an invalid_parameters error, but it works for other people.

I have tried to replicate it locally or in production but I have not been able to do it.

Told her to check her cookies and site data but nothing has been set so far so it's clean.

[mighty light]

Please create a separate #1072905050399191082 post

[hardy lance]

Okay, I have created one.

https://discord.com/channels/564160730845151244/1239325420093046827

[jovial solstice]

thanks for this

I added my domain to the custom domains - seems I have to wait now about 48 hours to propogate?

I will try the browser setting

Appwrite endpoint: "https://cloud.appwrite.io/v1"
Apps Urls: https://videogame-selector.netlify.app/

[mighty light]

uhhh the point was to have your app and your appwrite endpoint share a domain 🧐

[jovial solstice]

oh right to run locally

let me try that - but I would change my appwrite endpoint in my .env to run locally, right?

So im trying to now fix local and production

1. local, im not quite sure how to set local endpoint and app url to the same?
2. I created my domain in the appwrite settings page, but its says verification failed - not sure what to do with that now?

its deployed and hosted with netlfiy

[mighty light]

What did you set for your custom domain?

[jovial solstice]

hey sorry for the long wait, set it it to

videogame-selector.netlify.app

[mighty light]

You don't own the netlify.app domain. You can't do this. A custom domain is to use your own custom domain instead of cloud.appwrite.io.

Please make sure to read the docs thoroughly: https://appwrite.io/docs/advanced/platform/custom-domains

[jovial solstice]

ohh ok thank you

So I need to buy a domain in order to use oauth with appwrite?

[mighty light]

In production, you must.

For development, you can look into enabling 3rd party cookies in your browser

[jovial solstice]

Ohh okok fair enough

Hoping this will fix my issues. will try again tonight - appreicate it