getting bad request

[maheshwari1501]

I am using librechat image
veriosn 0.7.7
and my env is

• name: GOOGLE_ACCESS_TYPE
  value: offline
  - name: GOOGLE_PROMPT
  value: consent
  - name: GOOGLE_RESPONSE_TYPE
  value: code
  - name: GOOGLE_AUTHORIZATION_URL
  value: https://accounts.google.com/o/oauth2/v2/auth
  - name: GOOGLE_TOKEN_URL
  value: https://oauth2.googleapis.com/token
  - name: GOOGLE_SCOPE
  value: email profile
  - name: LOGIN_MAX
  value: "50"
  - name: DEBUG
  value: passport-google-oauth20,passport-oauth2
  - name: LOG_LEVEL
  value: trace
  - name: DOMAIN_CLIENT
  value: https://example.net
  - name: DOMAIN_SERVER
  value: https://example.net
  - name: GOOGLE_ALLOWED_DOMAINS
  value: example.ai
  - name: GOOGLE_HD
  value: example.ai
  - name: GOOGLE_CLIENT_ID
  value: xxxxxxxx
  - name: GOOGLE_CLIENT_SECRET
  value: xxxxxxx
  - name: GOOGLE_CALLBACK_URL
  value: /oauth/google/callback
  - name: PORT
  value: "3080"
  - name: HOST
  value: 0.0.0.0
  - name: MONGO_URI
  value: xxxxxxxx
  - name: JWT_SECRET
  value: xxxxxxx
  - name: CREDS_KEY
  value: xxxxxxx
  - name: CREDS_IV
  value: xxxxxx
  - name: JWT_REFRESH_SECRET
  value: xxxxxx
  - name: MEILI_MASTER_KEY
  value: xxxxxx
  - name: ALLOW_REGISTRATION
  value: "false"
  - name: ALLOW_SOCIAL_LOGIN
  value: "true"
  - name: GOOGLE_AUTH_ENABLED
  value: "true"
  - name: OPENAI_API_KEY
  value: sk-proj-xxxxx

this is the Authorised redirect URIs in gcp
https://example.com/oauth/google/callback
https://example.com/login

Authorised JavaScript origins
https://example.com

I am getting error

TokenError: Bad Request
at OAuth2Strategy.parseErrorResponse (/app/node_modules/passport-oauth2/lib/strategy.js:373:12)
at OAuth2Strategy._createOAuthError (/app/node_modules/passport-oauth2/lib/strategy.js:420:16)
at /app/node_modules/passport-oauth2/lib/strategy.js:177:45
at /app/node_modules/oauth/lib/oauth2.js:196:18
at passBackControl (/app/node_modules/oauth/lib/oauth2.js:132:9)
at IncomingMessage. (/app/node_modules/oauth/lib/oauth2.js:157:7)
at IncomingMessage.emit (node:events:530:35)
at endReadableNT (node:internal/streams/readable:1698:12)
at process.processTicksAndRejections (node:internal/process/task_queues:82:21)

after trying to login via google app

Version Information

docker image veriosn is 0.7.7

Steps to Reproduce

i am using the image and created the ingress for the same
I am getting via a google auth set up

What browsers are you seeing the problem on?

Chrome

Relevant log output

Screenshots

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[jona7o]

did you find a solutions for the problem? i am running in the same problem. :-(

[vasil-derimanov]

In file api/server/routes/oauth.js you can handle the error.
Change this code:

router.get(
  '/google/callback',
  passport.authenticate('google', {
    failureRedirect: `${domains.client}/oauth/error`,
    failureMessage: true,
    session: false,
    scope: ['openid', 'profile', 'email'],
  }),
  setBalanceConfig,
  oauthHandler,
);

This is the fix:

const authenticateGoogle = (req, res, next) => {
  passport.authenticate(
    'google',
    {
      session: false,
      scope: ['openid', 'profile', 'email'],
    },
    (err, user, info) => {
      if (err || !user) {
        return res.redirect(`${domains.client}/oauth/error`);
      }

      // Success - attach user to request and continue
      req.user = user;
      next();
    },
  )(req, res, next);
};

router.get('/google/callback', authenticateGoogle, setBalanceConfig, oauthHandler);

While there may be better approaches, this solution is effective.

You can reproduce and test it when you send a bad Google Token:

/oauth/google/callback?code=4%2F0AVMBsJiFI8Qmy1AZZYfAJDYGBHyn2CHoc6xq_m0tTj5VFoxlRMznjfJLsa8sDjy-1YVp0w&scope=email+profile+openid+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email&authuser=0&prompt=none