Google oauth returns Unauthorized Error during sign-in

[miu]

Hello All,

I have implemented google oauth for sign-up. During sign up i store the user email id & hash the sub/google id using argon2i & save as password.

When i am trying to login/sign in, i am getting ‘Unauthorized’ error. Below are the API steps i have followed:

I have tried binding the hashed password in the Security login as well as the ‘sub’ returned by the API, still getting Unauthorized error.

[franse]

The redirect step looks strange to me, outside the condition will always run, what if you disable it?

[franse]

Also, maybe this can help?

Auto-Login When Using Argon

Hi. We recently switched from SHA512 salt based password to Argon in one of our projects. All our users would have to reset their password, which is fine. We have a backend admin app (AA) and a consumer facing app (CA). Both use the same DB and user table in their security provider setup. In one of our use cases, the admin user while logged into AA needs to log into the CA to view their user-dashboard. For this, we created a token based system where on click of a button in AA, user would be …

[miu]

Thanks @franse for sharing these tutorials. I followed the tutorials & found the mistake i was making while implementing google oauth.

I was double hashing the password, due to which it was not been verified. I fixed that & now it is working fine.