Topic-icon Google login going to privacy page

Active Subscriptions:

None
5 years 1 month ago #65138 by petgal
Hi,
I was just testing my google login and it seemed to work well. After choosing the google account I want to login with I'm then presented with y site's privacy page with no option to accept or decline. It just seems to send the user to my site's privacy page. Can you advise why this is happening. I assume it's something I did not configure properly.
The topic has been locked.
Support Specialist
5 years 1 month ago #65141 by alzander
The only suggestions I can give are to check the New User and Returning User redirection settings in the JFBConnect -> Configuration area. If those settins are correct, then that would indicate something else is trying to redirect the user. There are many security and privacy extensions (especially for GPDR) that can redirect users to privacy policy pages under certain conditions.

I hope that helps you narrow things down, but if you need anything else, let me know.

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
5 years 1 month ago #65146 by petgal
Hi Alex,
The issue only occurs for the Google login and the redirects are to the my profile and home pages. See attachment.

Can you suggest what else to check?


File Attachment:
The topic has been locked.
Active Subscriptions:

None
5 years 1 month ago #65147 by petgal
Hi Alex,
Seems I have created APIs using two different google accounts. I'm trying to see where to get the App ID and the secret key from the page shown in the attachment. Don't know if my problem is related to using the wrong IDS.
File Attachment:
The topic has been locked.
Support Specialist
5 years 1 month ago #65151 by alzander
The IDs are probably not the cause. If the IDs were incorrect, authentication wouldn't work at all.

I don't know what else would be redirecting the user within JFBConnect. Can you tell us what you've tried from my suggestions? Did you disable SEF URLs or caching? Do you have any security extensions on your site? Any details you can provide on how your site operates or other features of the site that could possibly be conflicting may help provide clues as to what's causing the issue.

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
5 years 1 month ago #65160 by petgal
Hmm. Interesting. I replied to this already but now discover it didn't go through.

What I said was that you hadn't suggested anything else, so no. I have no security extensions that I'm aware.

I just tried it again and now nothing happens. I click the google button and the page just refreshes to the home page. It's no longer going to the privacy page.

The info api and secret keys are correctly inserted in the jfbconnect configuration tab.

What do you suggest?

Peter
The topic has been locked.
Support Specialist
5 years 1 month ago #65163 by alzander
Peter,
When I go to your domain, it shows a developer login window. I don't see Google login anywhere to test. Can you let me know what domain or URL I can use to test on and see if I can understand what the problem may be?

Thanks,
Alex
The topic has been locked.
Active Subscriptions:

None
5 years 1 month ago #65164 by petgal
Is this private Alex?
The topic has been locked.
Active Subscriptions:

None
5 years 1 month ago #65165 by petgal
By the way, I got this in the mail:

QUOTE

Hello Google+ Developer,

The email below contains your most recent usage of Google+ APIs. It also contains information about important, recent changes to aspects of the shutdown. These changes may help mitigate the impact of the shutdown for some developers. This is the final email that will be sent about this shutdown.

What do I need to know?

On March 7, 2019, we are shutting down the legacy Google+ APIs. This has been a progressive shutdown where calls to affected APIs began intermittently failing on January 28, 2019.

What recent changes were made to the shutdown?

Some APIs labelled "Google+" provide access to basic account information that is critical to sign-in use cases, including for many third-party apps and sites. To help mitigate the impact of the Google+ APIs shutdown on the sign-in use cases, we have created a new implementation of several people.get and people.getOpenIdConnect APIs that will only return basic fields necessary for sign-in functionality such as name and email address, if authorized by the user. The new implementation only allows an app to retrieve the profile of the signed-in user, and can return only basic profile fields necessary for user sign-in functionality.

While we still recommend that developers migrate to alternative APIs such as Google Sign-in and Google People API, for cases where developers are unable to move over before March 7, existing calls made to the legacy Google+ people.get and people.getOpenIdConnect APIs will automatically be served by this new implementation.

Likewise, requests for some OAuth scopes will no longer fail as previously communicated. In most cases scope requests such as those used for sign-in and usage not related to Google+ will no longer return an error as previously communicated. However, other scopes that authorized access to Google+ data such as Circle and Stream information will still no longer be granted. See the full outline of scope behavior here. While we strongly encourage developers to migrate to Google Sign-in, for cases where developers are unable to move over before March 7, scopes required for Google+ Sign-in will now be remapped to existing Google Sign-in (not Google+) scopes, which should allow these legacy applications to continue to use Google+ Sign-In until they can migrate.

See here for full details, including information if you would like to test your application.

What do I need to do?

Please review your projects listed below by March 7, 2019 and ensure they are no longer using affected Google+ APIs. The data below shows which Google+ API methods your projects have recently called, as well as Google+ OAuth scopes it has requested.

Notes:

If you see API calls to people.get, these can be the result of using the Google+ Sign-In feature in your application, which is now fully deprecated and is being shut down. Developers should migrate from the Google+ Sign-In feature to the more comprehensive Google Sign-in authentication system.
You may see OAuth requests for plus.me, even if your project is not requesting this scope directly. You only need to remove such requests if your project is directly requesting this scope.
Project Google+ API Name Version Method or OAuth Scope
API Project (goodtalktnt.com:api-project-1095089762874) OAuth N/A plus.me
Anything else to know?

Google+ integrations for web or mobile apps are also being shut down. Please see this additional notice.

Thanks for being a valued Google+ Developer.

Sincerely,

The Google+ API team

UNQUOTE

Does this explain anything?
The topic has been locked.
Support Specialist
5 years 1 month ago #65170 by alzander
Re Google+, we believe JFBConnect is fully up to date with the required changes. We moved over to the new, official Google API back in June and made some other changes in December and January to bring our code fully inline with what we believe is required. We're monitoring the shutdown of Google+ and haven't found any issues or incompatibilities, but their Documentation on the upgrade process has some holes.

Now that it's past March 7th, definitely test to make sure authentication works as you expect on your site. I know you're having issues on at least one site, but unsure if your other sites are. Please test on whatever sites have been working with Google.

As for how to send us the site, no, this area is public. Please Private Message us the domain and where to authenticate and we'll gladly test further to see if we can tell what's going on.

Thanks,
Alex
The topic has been locked.