scionaltera / emergentmud

EmergentMUD is a free, text based "Multi-User Domain" that you play in your browser.
https://emergentmud.com
GNU Affero General Public License v3.0
5 stars 1 forks source link

Google auth is very sensitive to cookies #53

Open scionaltera opened 6 years ago

scionaltera commented 6 years ago

I'm not sure exactly what can be done to fix it, but if you have existing cookies from the site (e.g. you have previously authenticated with Facebook) it is very likely that authenticating with Google will fail with "401 Unauthorized". Unfortunately there is very little information on the error page and most users would give up at that point assuming the site is broken.

At the very minimum the error page needs to explain that clearing your cookies will fix it. Better would be to proactively detect the situation and transparently fix up the cookies so that authentication can succeed.