line / flutter_line_sdk

A Flutter plugin that lets developers access LINE's native SDKs in Flutter apps with Dart.
https://developers.line.biz/
Apache License 2.0
213 stars 42 forks source link

403 forbidden #89

Open OussemaZaier opened 9 months ago

OussemaZaier commented 9 months ago

Is it a security issue?

No If you believe you have discovered a vulnerability or have an issue related to security, please DO NOT open a public issue. Instead, send us a mail to dl_oss_dev@linecorp.com.

What did you do?

Please describe what you did before you encounter the issue. I set up the config correctly, and re-did it again. The app was working one week ago but now when ii press login with line button in my app it takes me to line app but with forbidden 403 screen.

What did you expect?

Get the token from the user.

What happened actually?

I got a 403 page

Your environment?

Dart SDK version: 3.1.3
flutter_line_sdk: ^2.3.6

Sample project

LineSDK.instance.setup(dotEnv.LineID).then((_) {
    print("LineSDK Prepared");
  });

  try {
      final result =
          await LineSDK.instance.login(scopes: ['profile', 'email', 'openid']);

      final userId = result.userProfile!.userId;

      return userId;
    } catch (e) {
      return Future.error('error');
    }
onevcat commented 9 months ago

@OussemaZaier

Hi, thanks for reporting this.

May I know does this issue only happen on iOS or Android, or does it happen on both?

Usually, if you are still under development and the app you registered in LINE Developer Console is not yet published, you will need to use the admin account of that app or use an explicitly added tester account to perform the login test. In this case, the 403 error means the account you are using is not allowed to login to this LINE channel. Can you try to check that?

OussemaZaier commented 9 months ago

Good morning Wei,Thank you for your response.Well the app is in live not in development mode,The issue persists in ios and android even though i used the correct bundle id and config in my line developer console. RegardsSent from my iPhoneOn Nov 20, 2023, at 2:04 AM, Wei Wang @.***> wrote: @OussemaZaier Hi, thanks for reporting this. May I know does this issue only happen on iOS or Android, or does it happen on both? Usually, if you are still under development and the app you registered in LINE Developer Console is not yet published, you will need to use the admin account of that app or use an explicitly added tester account to perform the login test. In this case, the 403 error means the account you are using is not allowed to login to this LINE channel. Can you try to check that?

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: @.***>

onevcat commented 9 months ago

Ummm, that does not sound good.

I just had a try with the flutter SDK and our example app, and seems every thing goes fine. So it might be a channel-specified setting at last.

May I know your Channel ID? I can ask for a detailed investigation to see what can be wrong.

OussemaZaier commented 9 months ago

yes sure 2001114405

onevcat commented 9 months ago

@OussemaZaier

We checked the log and seems your channel works fine.

There were indeed some 403 events left (although I am not sure if these were login attempts of yours) and the reason seems to be the user is under penalty since 2023/10/31 (sorry but I cannot provide any more information about the penalty).

Can you try to change an account to perform the log in and see what can happen?