Child Item

Sometime oauth api login with google lose redirect_uri

When i load oauth2 login api /oauth2/authorize using webview on android

https://www.dropbox.com/oauth2/authorize?client_id=qXXXXXXXXXXXXXXXX5&response_type=code&token_access_type=offline&redirect_uri=https://wxx.xxxxxx.com/xxxxplusxxxxxxx/filemanager/&state=SXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXy6mvLyb

Then the next screen will lead to https://accounts.google.com/v3/signin/identifier

But sometimes url is missing redirect_uri query parameter

So in the end it doesn't boot redirect

https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Faccounts.google.com%2Fgsi%2Fselect%3Fclient_id%3D8XXXXXXXX5.apps.googleusercontent.com%26auto_select%3Dfalse%26ux_mode%3Dpopup%26ui_mode%3Dbottom_sheet%26context%3Dsignup%26as%3Dxfy%252ByJw%2F7r4cl6V%2Fq6fg%252BQ%26channel_id%3D93176f5e1280e5820caffd3d33e5d0931839bead2e50f796948e5e7c88c123a9%26origin%3Dhttps%3A%2F%2Fwww.dropbox.com&faa=1&ifkv=AXo7B7VC28jbTlCcaprh2J09aKW0ihNJf8P3pRQpTbuZb3hzceienHBgZ133nDxCG1UQL-M3u4pK&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-2029173536%3A1692770659017967

At this time, the user continues to enter the account password, and finally redirects to

https://accounts.google.com/gsi/select?client_id=8XXXXXXX5.apps.googleusercontent.com&auto_select=false&ux_mode=popup&ui_mode=card&context=signup&as=YLtRqbruo5lXSaz2hgisWA&channel_id=7484801cfcc61ed37c1fa778d14909d04b2970a15951d9119cb4b66bad8475a1&origin=https://www.dropbox.com&authuser=0

This page is not I want to redirect

The correct page is

https://accounts.google.com/v3/signin/identifier?opparams=%253F&dsh=S1711737748%3A1692770746913896&access_type=offline&client_id=8XXXXXXX5.apps.googleusercontent.com&include_granted_scopes=true&o2v=1&prompt=select_account&redirect_uri=https%3A%2F%2Fwww.dropbox.com%2Fgoogle%2Fauthcallback&response_type=code&scope=email+profile&service=lso&state=AFKHGqtkNiNp0F9V4r0bAt0PS2zYjCQm_OUHMiJXbyrP-Gb0R-XDxaNXJnKb_sx7BQ6Tp-oCRUA3I6wS6Z0O-ZEp_N-_fuBuXDjtJ32DWRJtN2PocukA1XeH3pjO_tf0_NAnjlA4R48m7eggDDE6muct3vxDuL_FzSPXyJNKGlrz9ReXm01SP60L1I1Idj4-JAKbuBu_SkdIxrszQq5YprjofQBMyYbV6GEUzncbteJ8EuR6Z7LgRFPrFHlTVLU5AZwNmT8WPSJKH5QxEyCVHUkpKY5rlpHkCX_Q1R4hBniu7fTRt4ffvpn8m00o-a4zjCDne-ywxhD2emOG8mFILSwY-4xYBJAzq-1vPJ6Wrxp4ZlZDCrDCAHi3Mew6DVONP2UJjdKQnpvpjwYxuH-H5PpemGWaUAUDdj2WZIeV1pjmeyZu3rSZ9TtjMH8Ioedq31GuXlUTtw6jrJkLLiBuBFKFKMg0tXGH041Jk9AGxSSvpLzxpBXYCx--0bynjXaRt9oFXq0nVcabSJ-xPjqH0oMAp-PSDmqGPkKib__5v4H8kn76DxGv11XMprM9m2KOnDsHXAUo_3u4hdKs5UMJSkbt8ggBEXh5G5elcqDnlRQTJEktxRor45KLu627myARjQwKJTkoeCtq7jSCjbriIjLn-js8bBQ_-HboqtbL6tmnNXGSMJItH81mewpx7PMKjb6WxVhw90sR8Jnd731VJxc0EGevSCOlbOvXtvud6ZxVuhRiQFZu9v3ps6kairjjmF4&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAO223w3DHgdZBehdvH1WFH2rn2rhFgwzswNQv0odncSimx7bD0piKSul0fuKCTCdF4CAWxSC0v_07AK64R6kNGPpePUg1wj1NTIqfI0D554WrLetaRXPsqAi44VL-Cd2bWEJcYYFMFHsKf1ccNcfXqr_BIfm9oCcxjhiej8QCuW_Dk7u2TTjCUOpZ-NwrK-Fs8NADrvxkkWqLrXJ1sKNZdTYXP8p4rOcfojXMevjIsn673HHV4c6L0b1rmyu6M1J4x6oGZXjRvQZq0URlIP2uKjaCO-GoJhVxv86WMw9MyIYts4eEfDIf_goETo2qqsvl_yB_vGCa23IF2QhCXQ8Xr55ffXgy15JSFfW6z8VrLDBt_TU38SzmzpmJTmmixBvyJWRG9_EiB4jt6HkT6aC7lPzNLdn4XHooG7x9FXhV7ubvJ6Iz4%26as%3DS1711737748%253A1692770746913896%26client_id%3D801668726815.apps.googleusercontent.com%23&app_domain=https%3A%2F%2Fwww.dropbox.com&rart=ANgoxccP85GOamR0pKAbJb_S-3rDopEwK5HSneM1fYm54g_7NVJ8-e7pe77OW3x_ZsYID1vQUZAm-xezfrf-gczA4Elsyym2aA

Unfortunately, when the error occurs,

it occurs with high frequency and is very unstable, and continues to make it difficult for users to log in with google accounts

How can i fix this?

Testing platform

Android 10, 11, 13

WebView 115.0.5790.166, 83.0.4103.120, 95.0.4638.74

Find more posts tagged with

API

Abuse

Comments

Greg-DB

Thanks for the report. Dropbox does not support using the Dropbox /oauth2/authorize page in web views though. Please update your app to use a supported system web browser. If you're still seeing this issue with a supported system web browser, please let us know.

AkiWang

But if we need a friendlier user experience
We will need to use webivew
Does dropbox have plans to support webview?
or at least provide the version number of the webview that can run

Greg-DB

No, Dropbox does not have plans to support webviews for the app authorization flow, and accordingly we cannot provide any specific webview versions that are expected to work.

AkiWang

Why dropbox-sdk-java still uses the browser to open the web page to log in?
After we implemented this, we found that many customers could not use google and apple to log in

Greg-DB

I'm not sure I understand your latest message. If something isn't working properly, I'll be happy to help, but I'd need some more information. In that case, please reply with:

the name and version number of the platform and SDK/library you are using, if any
the steps to reproduce the issue, including relevant code snippet(s), but don't include any access or refresh token(s)
the full text of any unexpected output/error/behavior