Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • G gitlabhq1
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 21
    • Issues 21
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 12
    • Merge requests 12
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Infrastructure Registry
  • Analytics
    • Analytics
    • CI/CD
    • Repository
    • Value stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • gpt
  • large_projects
  • gitlabhq1
  • Issues
  • #9479

Closed
Open
Created Jul 23, 2015 by Administrator@rootOwner

Update to 7.13 (from 7.12) Google Oauth Broken

Created by: rlambrechts

Hello since the update to 7.13 OAuth seems to be broken;

Any advice on this? Kind regards,

gitlab.rb:

# Change the external_url to the address your users will type in their browser
external_url 'http://git.mycompany.com'
gitlab_rails['internal_api_url'] = 'http://localhost/'
# OmniAuth
gitlab_rails['omniauth_enabled'] = true
gitlab_rails['omniauth_providers'] = [
{
        "name" => "google_oauth2",
        "app_id" => "3XXX.apps.googleusercontent.com",
        "app_secret" => "YYYY",
        "args" => { "access_type" => "offline", "approval_prompt" => "" }
}
]
# Workers
unicorn['worker_processes'] = 3
unicorn['timeout'] = 300

cat /var/log/gitlab/gitlab-rails/production.log

Completed 200 OK in 740ms (Views: 2.1ms | ActiveRecord: 32.1ms)
Started POST "/users/auth/google_oauth2" for 147.67.241.226 at 2015-07-23 14:35:16 +0000
Can't verify CSRF token authenticity
ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken):
  lib/omni_auth/request_forgery_protection.rb:58:in `handle_unverified_request'
  lib/omni_auth/request_forgery_protection.rb:33:in `verify_authenticity_token'
  lib/omni_auth/request_forgery_protection.rb:27:in `call'
  config/initializers/7_omniauth.rb:18:in `block in <top (required)>'
Assignee
Assign to
Time tracking