Unable to log in "Google Authentication fail: Error: invalid_grant" about codecity HOT 4 CLOSED

More info: after getting "Invalid Grant" message, if you go back to the login page and click the login button again it works fine.

from codecity.

O.K., I am able to reproduce this 100% of the time on my local machine, using an incognito window to log in with either my corp or personal account.

from codecity.

The first time we hit the login server, the URL is just /login. After user clicks login, we hit it again with a URL that looks like:

/login?code=4%2F_gChz... [censored] ...Se98&scope=openid+email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email

This provokes the invalid_grant response, but if the user goes back to the login page and clicks the button again, they hit the login server with a URL that looks like:

/login?code=4/_gCMN... [censored] ...rM7g&scope=openid+email+https://www.googleapis.com/auth/userinfo.email

… and that one works.

from codecity.

O.K., confirmed: the problem is that oauth2Client.getToken doesn't like being passed the code URI encoded. (It also doesn't need to get passed the rest of the query parameters, though seem to ignore them happily enough.)

from codecity.