search

ShippingEasy / omniauth-ecwid

OmniAuth OAuth2 strategy for Ecwid
MIT License
0 stars 3 forks source link

OmniAuth::Strategies::OAuth2::CallbackError (csrf_detected | CSRF detected) #2

Open ParthivPatel-BTC opened 6 years ago

ParthivPatel-BTC commented 6 years ago

Cannot render console from 203.88.147.114! Allowed networks: 127.0.0.1, ::1, 127.0.0.0/127.255.255.255 (0.8ms) SELECT "schema_migrations"."version" FROM "schema_migrations" ORDER BY "schema_migrations"."version" ASC I, [2018-01-08T16:53:35.868564 #22388] INFO -- omniauth: (ecwid) Callback phase initiated. E, [2018-01-08T16:53:35.875967 #22388] ERROR -- omniauth: (ecwid) Authentication failure! csrf_detected: OmniAuth::Strategies::OAuth2::CallbackError, csrf_detected | CSRF detected E, [2018-01-08T16:53:35.877131 #22388] ERROR -- omniauth: (ecwid) Authentication failure! invalid_credentials: OmniAuth::Strategies::OAuth2::CallbackError, csrf_detected | CSRF detected

OmniAuth::Strategies::OAuth2::CallbackError (csrf_detected | CSRF detected):

Any solution?

amitpatelx commented 6 years ago

@ParthivPatel-BTC there is a workaround https://github.com/omniauth/omniauth-oauth2/issues/32. You can set :provider_ignores_state => true in omniauth.rb like

provider :ecwid, ENV['APPLICATION_ID'], ENV['SHARED_SECRET'], {:provider_ignores_state => true}