Hello, I’m new to Discourse. Recently created a forum and now in the process of moving the site and the forum to a new domain name. The forum’s old domain: https://forum.skymail.app (not active, redirects to new site) New domain: https://forum.sugarmail.app (operational) Having trouble with Google auth. I’ve got a Google Cloud project, and after switching to the new domain, I also changed the redirect url under Client ID there, so currently it’s set to https://forum.sugarmail.app/auth/google_oauth2/callback Now the issue. When trying to “sign up with Google”, I get this error in Discourse: https://forum.sugarmail.app/auth/failure?message=csrf_detected Authorization timed out, or you have switched browsers. Please try again. When the forum was under the old domain, forum.skymail.app, Google auth worked without issue. I did do ./launcher rebuild app after changing the domain, making sure to update the domain in app.yaml under DISCOURSE_HOSTNAME (in fact the forum wouldn’t load at all until I did that). Any pointers please?

Make sure you’re sending along X-Forwarded-Proto: https. [image] Run other websites on the same machine as Discourse Self-Hosting If you want to run other websites on the same machine as Discourse, you need to set up an extra NGINX or HAProxy proxy in front of the Docker container. NOTE: This is for advanced admins This guide assumes you already have Discourse working - if you don’t, it may be hard to tell whether or not the configuration is working. You cannot use ./discourse-setup to set up Discourse if another server is using port 80 or 443. You will need to copy and edit samples/standalone.yml with your favorite tex…

Normally, when you start the login flow, the _forum_session cookie is set in your browser. However, on your site, that doesn’t seem to be happening. Do you have any plugins or proxies which could be intefering with the cookies on your site?

Thank you for the response. Plugins - no, not using any. About the only thing I did after installation was to enable Google auth (client id and secret) and enabling “always use https”. Proxies - I’m using nginx as a reverse proxy (which also serves the main app site). # discourse location / { proxy_set_header X-Real-IP $remote_addr; proxy_pass_request_headers on; proxy_pass http://localhost:10080; } and in containers/app.yaml expose: - "10080:80" # http - "10443:443" # https Let’s Encrypt in Discourse settings is not enabled. So the nginx inside the container is serving plain http, and the outside nginx add ssl termination. These is almost same setup I had with the old domain, the only difference is “force https”. I’m running 2.6.0.beta3.

Oh darn, it’s “force https” which I previously had off. I enabled it recently, to avoid getting the warning in Chrome about “insecure page content” which was happening because of plain http links to images. To reiterate, I do ssl termination in the “outside” nginx, and as far as Discouse itself goes, there is no ssl. Turning off “force https” makes Google auth work again (I had to add a plain http redirect URL in the Google Cloud project). But that’s not good because there will be “insecure site” / mixed content warnings as soon as there are images. Is there a way to keep Google auth working with “force https” and ssl termination outside of Discourse? ( I’d use Discourse’s own ssl support except it assumes that it “owns” the domain, so I’d need to set up an additional IP address for this VPS and separate the main site and the forum… which is a bit of a chore… )

Thank you @riking I’ve now copied the nginx block from your link verbatim, then then enabled “force https” as recommended by Discourse admin console. My forum is back up and running now and Google auth is working. An issue still persists, though: Both Chrome and Firefox are giving me warnings about insecure page content. Looking at network trace in Chrome dev tools, it’s this link (plain http, not https): [129430568242d1b7f853bb13ebea28b3f6af4e72512x512]

[image] Kostya_Vasilyev: Looking at network trace in Chrome dev tools, it’s this link (plain http, not https): Ah, never mind. I just set a new, custom favicon and it’s now fetched using https. No mo “mixed content” warnings. Beautiful, thanks for your help!

Google auth error

Product Support

riking (Kane York) October 7, 2020, 11:54am 5

Make sure you’re sending along X-Forwarded-Proto: https.

Topic		Replies	Views
Redirect URI mismatch in Google Auth Product Support	1	1193	July 17, 2019
How to Resolve redirect_uri_mismatch Error When Enabling Google Login in Discourse with Reverse Proxy Setup? Product Support	3	250	January 21, 2025
Oauth2 redirect_uri uses HTTP when my forum is using HTTPS SSO oauth2	5	1816	July 8, 2018
Google login regression, possibly after recent changes Product Support social-auth	4	433	December 6, 2024
Twitter, Github and normal username and password logins not working after upgrade Self-hosting unsupported-install	34	7938	October 22, 2016

Google auth error

Related topics