<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z000075uWkPCAUOkta Classic EngineAuthenticationAnswered2021-08-01T16:23:01.000Z2021-07-29T08:37:36.000Z2021-08-01T16:23:01.000Z

ArneR.87055 (Customer) asked a question.

Google Sign in on mobile app and website

Google’s social login solution currently doesn’t allow for subsequent alterations without disconnecting and re-authenticating it with each third-party website.

Will using OKTA refresh tokens address this problem?


  • Ionut here from Okta Support.

     

    This requires further investigation of your configuration. We recommend opening a support ticket with us so we can view your configuration and gather more details.

  • ArneR.87055 (Customer)

    Hi Ionut,

     

    Thanks for your follow up to my Support request.

    Our developer has managed to fix the problem.

     

    Our web application has not yet implemented Okta authentication or using its Android SDKs.

    It is under contruction:

     

    https://previewlondon.net/

     

    Currently our website developed in Codeigniter is the backend to an Android and iOS app.

    We are using APIs to display products, shopping cart, user menu and login.

     

    The user can login with email and social login OK on the website; Facebook, Twitter and Google OK.

    We were having problem with Google sign in on the app as Google does not allow login in webviews so was displayed this error on Android:

     

     

    Upcoming security changes to Google's OAuth 2.0 authorization endpoint in embedded webviews

    Tuesday, June 29, 2021

    Posted by Badi Azad, Group Product Manager (@badiazad)

    The Google Identity team is continually working to improve Google Account security and create a safer and more secure experience for our users. As part of that work, we recently introduced a new secure browser policy prohibiting Google OAuth requests in embedded browser libraries commonly referred to as embedded webviews. All embedded webviews will be blocked starting on September 30, 2021.

     

    https://developers.googleblog.com/2021/06/upcoming-security-changes-to-googles-oauth-2.0-authorization-endpoint.html

     

     

    If I have any problems, I will contact you for assistance.

     

    Regards,

     

     

    Arne

     

    Expand Post
    • Screenshot_20210722-084727
This question is closed.
Loading
Google Sign in on mobile app and website