# (google\_oauth2) Authentication failure! csrf\_detected: OmniAuth::Strategies::OAuth2::CallbackError, csrf\_detected | CSRF detected

**URL:** <https://meta.discourse.org/t/google-oauth2-authentication-failure-csrf-detected-omniauth-callbackerror-csrf-detected-csrf-detected/339797>\
**Category:** Product Support\
**Created:** [December 2, 2024, 1:04pm UTC](https://meta.discourse.org/t/google-oauth2-authentication-failure-csrf-detected-omniauth-callbackerror-csrf-detected-csrf-detected/339797 "2024-12-02T13:04:43Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Jagster](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagster/32/192154_2.png) [@Jagster](https://meta.discourse.org/u/Jagster)\
**Post date:** [December 2, 2024, 1:04pm UTC](https://meta.discourse.org/t/google-oauth2-authentication-failure-csrf-detected-omniauth-callbackerror-csrf-detected-csrf-detected/339797/1 "2024-12-02T13:04:43Z")

</div>

What is this:

```plaintext
hostname	foorumi-hel-app
process_id	1077
application_version	3cde55b76f6d681a243876b360bd8368c0a81ac6
HTTP_HOST	foorumi.katiska.eu
REQUEST_METHOD	GET
HTTP_USER_AGENT	Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
HTTP_ACCEPT	text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
HTTP_REFERER	https://foorumi.katiska.eu/
HTTP_X_FORWARDED_FOR	85.76.111.65
HTTP_X_REAL_IP	85.76.111.65
time	30 Nov 7:34 am
params	
state	edc470bf5dbcc14f46f8f0a69387802c2bb6ae8e11e4c860
code	4/0AeanS0ZgDJNVUeQlVTnboHXxXH2c7jimPnAH9-CrvMhUD6AULR8YxnYy0W9g4CCcg7RqrA
scope	em

```

I got similar ones every now and then, but not too often. I would like to understand what was happening.

Sometimes, as this, the IP is legit per se — the biggest mobile IPS in Finland — but sometimes it is as the latest 37.33.208.84, I can’t solve that, but it looks like Hetzner VPS 🤷‍♂️

Are someone trying something funny, but the system stopped it? Or do I have issues with google logins?

---

_[View the full topic](https://meta.discourse.org/t/google-oauth2-authentication-failure-csrf-detected-omniauth-callbackerror-csrf-detected-csrf-detected/339797)._
