laravel socialite showing HTTP Error 403 - Forbidden for google login

Question

Laravel socialite showing HTTP Error 403 - Forbidden for google login on the callback but working fine for facebook login. Previously it was working fine but after adding SSL it is showing the error I am not able to find out what is the problem, same code was running fine on another subdomain, Google plus API is enabled. Someone, please help me out here is the URL - www.beingreligious.com

When i login with google with it return

https://www.beingreligious.com/auth/google/callback?state=JSqZHyIkS6bLMTMHZ4dMmbgXJwbXuDiwOqVBSp7I&code=4/WgDWcviWNpyVBB4ScPG7mNzQAveXOAlc9dQ5bvwn7BVhfUyCBegloMU7lK3O7hGxSphyHp86Nm36Vl40eE3LsNc&scope=https://www.googleapis.com/auth/plus.me+https://www.googleapis.com/auth/userinfo.profile+https://www.googleapis.com/auth/userinfo.email&authuser=1&session_state=db2d5443920526f58d68ac724e14f4e5af70497f..2a92&prompt=consent#

here is the callback function

public function handleProviderCallback(Request $request,$provider)
    {
        //echo "here"; die;
        $user = Socialite::driver($provider)->user();
        $authUser = $this->findOrCreateUser($user, $provider,$request);
        Auth::login($authUser, true);
        $next=session()->get('nextbtn');
        if($next!='')
        {
        return redirect('/check_sign_up?next='.$next);
        }else{
        return redirect('/check_sign_up');
        }
    }

Please edit your question and include your code we cant help debuging what we cant see — Linda Lawton - DaImTo, Sep 14 '18 at 08:46
hey @DaImTo thanx for your reply . i added the callback function code in my question please have a look — Manoj Negi, Sep 14 '18 at 08:55
@bhaskar i added the url on google app and also on .env file — Manoj Negi, Sep 14 '18 at 09:06
ok let me check. Please set APP_DEBUG = true; on server. And let me know — Brn.Rajoriya, Sep 14 '18 at 09:40
APP_DEBUG is already true . can your visit this link https://www.beingreligious.com/login and login with google . than you will understand what the problem is. on the same url if you login with facebook it is working — Manoj Negi, Sep 14 '18 at 09:42
Please add code you wrote in Route file for route : `/auth/google/callback` and Controller function — Brn.Rajoriya, Sep 14 '18 at 09:46
Route::get('auth/{provider}/callback', 'HomeController@handleProviderCallback'); it's the code of route — Manoj Negi, Sep 14 '18 at 09:47
Hey @DaImTo i added the screenshot of error page in the question — Manoj Negi, Sep 14 '18 at 09:53
hey @DaImTo problem is not with website its only with the google login. if you open the website link you'll see the website is running fine — Manoj Negi, Sep 14 '18 at 10:00
@ManojNegi the issue is seems because of route. Unable to find route defination in web.php. — Brn.Rajoriya, Sep 14 '18 at 10:22
actually the issue is with the data returning by the google. and i have no idea how to resolve it — Manoj Negi, Sep 14 '18 at 10:23
Then confirm this by uncomment `//echo "here"; die;`. Check if it prints here in page then let me know. — Brn.Rajoriya, Sep 14 '18 at 10:33
yes its printing "here" when i access the url without returning parameters — Manoj Negi, Sep 14 '18 at 10:35
No everything keep the same. Just uncomment that line. And try to login with google. and check — Brn.Rajoriya, Sep 14 '18 at 11:00
hey if i remove "&scope=https://www.googleapis.com/auth/plus.me+https://www.googleapis.com/auth/userinfo.profile+https://www.googleapis.com/auth/userinfo.email" from the callback url than its working — Manoj Negi, Sep 14 '18 at 11:01
Ok then go to the Google app and enable this library access. — Brn.Rajoriya, Sep 14 '18 at 11:04
@ManojNegi Check this answer. This may help you. https://stackoverflow.com/questions/53348777/socialite-laravel-authantication-error-with-google-api/55782862#55782862 — Avnish Tiwary, Apr 21 '19 at 12:54

Vashistha Aggarwal · Answer 1 · 2018-10-04T12:24:44.910

4

I faced this issue because of Mod-security rule set up on my domain. ModSecurity is one of the apache server modules that provides a complete website protection by defending hackers and other malicious attacks.

I requested my server provider to disable it for my domain, because I am using a shared server. After it, I didn't face this issue and the google login is working as expected.

edited Oct 04 '18 at 12:24

answered Oct 03 '18 at 18:27

Vashistha Aggarwal

41
2

score 0 · Answer 2 · answered Nov 09 '19 at 17:03

0

Still, issue continuing,

click this link, you will get 403 error. https://www.beingreligious.com/?scope=http%3A%2F%2F

Reference here

403 Forbidden Error While Sending GET Data

answered Nov 09 '19 at 17:03

Ramesh

1,829
2
25
30

laravel socialite showing HTTP Error 403 - Forbidden for google login

2 Answers2