Google One Tap Sign in Error

[mash33]

I am trying to implement Google One Tap (https://developers.google.com/identity/gsi/web/guides/display-google-one-tap) using the built-in connected accounts feature. The Google connected account is set up and works as expected, and now I am trying to allow users to sign in by using the One Tap Experience. I've set up the One Tap code based on the requirements and set the endpoint URL as (https://......../forum/register/connected-accounts/google/?setup=1) which I've copied from the Google connected account feature. The One Tap sign in box appears, and the user can authenticate, but then after being redirected to the endpoint URL, the following error appears:

Security error occurred. Please press back, refresh the page, and try again.

I suspect the error is because of CSRF, but I don't know how to fix it. Any ideas?

I know a request suggestion has already been opened for this feature to be built in, but I haven't seen any progress on this: https://xenforo.com/community/threads/google-one-tap-sign-in-and-sign-up.184452/

 

[Old Nick]

I've set up the One Tap code based on the requirements and set the endpoint URL as (https://......../forum/register/connected-accounts/google/?setup=1) which I've copied from the Google connected account feature.

Did you try https://......../forum/connected-accounts.php instead ?

About connected accounts | Manual | XenForo

End-user documentation for XenForo

xenforo.com

 

[mash33]

I've tried .../foum/connected-accounts and .../forum/conntected-accounts.php and neither worked for me.

 

[Old Nick]

What the error console say ?

 

[mash33]

No errors are logged. The only visible error is the message provided by Xenforo in the standard template after the redirect:
Oops, we ran into some problems.
Security error occurred. Please press back, refresh the page, and try again.

Interestingly, if I navigate directly to https://......../forum/register/connected-accounts/google/?setup=1 the signup process works without issue. So it seems the issue is somewhere in the redirect.