the error it shows when i click to login:
Error message from facebook, i think
Error it Shows
GuzzleHttp\Exception\ClientException
Client error: `POST https://graph.facebook.com/v3.3/oauth/access_token` resulted in a `400 Bad Request` response: {"error":{"message":"Can't load URL: The domain of this URL isn't included in the app's domains. To be able to load this (truncated...)
http://socialite.com/login/facebook/callback?error_code=1349187&error_message=Insecure%20Login%20Blocked%3A%20You%20can%27t%20get%20an%20access%20token%20or%20log%20in%20to%20this%20app%20from%20an%20insecure%20page.%20Try%20re-loading%20the%20page%20as%20https%3A%2F%2F
Related
error image
text
this error is related to https request from the server of News API
i am getting error with Facebook login even after using ngrok for https.Now my URL contain HTTPS even though i am getting insecure login blocked.
here is my facebook setting.
I have developed an application in Django and I want to use the facebook authentication in my application.
For this, I add social_django in my app. Then I create the application login application on facebook developer.
In basic settings I put following:
App Name: mywebsite_name
**Privacy Policy URL: https://mydomain(domain has ssl certificate)
Site URL: https://mydomain
In the facebook login App setting:
Client OAuth Login : yes
Web OAuth Login: yes
Enforce HTTPS: yes
Force Web OAuth Reauthentication: No
Embedded Browser OAuth Login: Yes
Use Strict Mode for Redirect URIs: Yes
Valid OAuth Redirect URIs :https://mydomain/login/callback
Login from Devices : No
I have also added my appid and app secret in settings.py file as using .env file
SOCIAL_AUTH_FACEBOOK_KEY = config('SOCIAL_AUTH_FACEBOOK_KEY')
SOCIAL_AUTH_FACEBOOK_SECRET = config('SOCIAL_AUTH_FACEBOOK_SECRET')
In the urls.py file I do this:
<p>Continue With Facebook </p>
But unfortunately I am getting the following error:
Insecure login blocked: You can't get an access token or log in to this app from an insecure page. Try re-loading the page as https:// ?
And again note I have https domain name Please help me to remove this error.
I have used django-social-auth in my django application . Since Facebook has updated their policy about request url that it must be from https my django application has giving me this error :
Insecure Login Blocked: You can't get an access token or log in to
this app from an insecure page. Try re-loading the page as https:/
I have already installed ssl in my site and it worked fine with Twitter and google.In twitter i have given this callback URL :
http://example.com/oauth/complete/twitter/
same goes with google, Facebook does not allow you to even add callback URL with http in it. Now I can not get pass through this. Is their any way to get go pass through it. Help needed .
I am in my facebook app's settings > basics :
I have
**App ID: XXXX , App secret :XXXX ,
Displayname: app1 , Namespace : oauth,
App Domains: https://humbusy.tk , Contact Email : XXXX ,
Privacy policy :'XXXX', TOS URL : 'XXXX'**
your url must be https e.g, https://example.com/oauth/complete/facebook/
you can use to make http to https
(for localhost)https://github.com/teddziuba/django-sslserver
I am working on an external site to integrate django-allauth for facebook and google login. Facebook worked almost out of the box. However, with Google I get the "Social Network Login Failure" error.
Here is what I have done:
1.Google APIs console: Client ID for web applications configuration
Client ID: xxxxxxx.apps.googleusercontent.com
Email address: yyyyyyyy#developer.gserviceaccount.com
Client secret: xxx-yyy-zzz-111-222
Redirect URIs: http://learnbuzz.com/accounts/google/login/callback/
JavaScript origins: http://www.learnbuzz.com
2.Created learnbuzz.com site in Sites
3.Created the google app in Social Apps with the Client ID and secret from the google API console.
From the docs and few other SO questions, seems like that is all that is needed.
But, when I log in using google, I get to the accounts.google.com page where it asks the user to accept 'App sharing basic user information and email'. After I accept, it gives me a "Social Network Login Failure" for this url:
http://learnbuzz.com/accounts/google/login/callback/?state=l1WdxOgr26bB&code=4/lGhX6Dum_FNnM3FE39TcULZb1UMX.0jX6biQfm3MfEnp6UAPFm0F0CIGMgQI
What config am I missing?
Edit: I don't know if it matters but it takes the browsers quite some time before it throws out this error.
I've tried to access http://learnbuzz.com/accounts/google/login/callback and it requests http authorization. It is returning a 401 status code.
Probably your browser is already logged in and you can't see this request for authentication.
This page should be accessible from an anonymous browser windows. After you remove the need for authorization, it will work.