After completing the oauth process as described in the docs, adding the resulting keys to Zammad as described in step 5 and authenticating with Google, Zammad shows me my account so that I can add the gsuite inbox.
Actual behavior:
After authenticating with Google, Zammad gives me the message 500: We're sorry, but something went wrong.
Steps to reproduce the behavior:
Create OAuth consent
Create OAuth credentials
Connect new Google app in Zammad
Authenticate with Google
Receive 500 error
I also found Google Auth issue - "Message from google_oauth2: csrf_detected" which seems similar.
My installation is also NATāed and works through an external Nginx reverse proxy, though websockets and so on are turned on. It might not have anything to do with that though.
Any and all help to point me in the right direction would be much appreciated!
Hello @sid thanks for your addition. Because we needed to move forward, I ended up using the āinsecure accessā method to connect through IMAP/SMTP. But of course, it would be better to go back and move to oauth if we can figure out what is wrong.
Sadly, we just ran into the exact same problem again.
We had to change the existing Google Account, so the exact same installation.
However, when adding the new google account, we again see the 500 error.
Of course, we tried the steps that did work before, but they are not helping this time
This also means that whatever is causing it, is not fixed for us sadly.
We set up this account again using the āless secure appā option.
Sadly, we have been unable to get oauth working like before.
This is not a solution, but a workaround.
Strongly sounds like youāre running a test app there.
This is not working because credentials are reset regulary and thus the google channel no longer is working.
Please note that the documentation you provided is about the google channel, not google authentication and thus is about 2 different things. Iām mentioning this, because log files mention google_oauth2 which is not part of the google channel but the authentication.
You may talka bout different things because @Floris actually is mentioning the āless secure appā setting which is a workaround for using google email accounts with password.
Please be careful with wording other wise we may run into dead ends.
On this base, can you please confirm this feature works well ?
Could you please explain āThis is not working because credentials are reset regulary and thus the google channel no longer is working.ā ?
hello @MrGeneration thank you for your reply.
Indeed, as I wrote in my original post, we simply want to get mail from a gsuite inbox into zammad as tickets.
A short recap:
We were unable to add a gsuite inbox into Zammad, continually hitting the 500 error.
Then, adding the google channel somehow did work after updating to 4.0.0-20 though nothing else had changed.
However, some days later we had to change the connected channel, which lead to the same problem we had initially.
As a work around, we again set the less secure app setting so that we could pull mail into zammad, but we view that as a temporary setup.
Your point about a public test oauth app is understood, we also tried a different google cloud platform account (different domain) to create an external public test app and the oauth setup displayed a warning that it is not a persistent setup or something along those lines.
That only serves to confirm that the connection need to be made from either a verified external (public) oauth app (the process for wich we could go through if it really helps) or an internal oath app.
Unfortunately, neither the internal oauth nor the external testing oauth worked for us getting a gsuite mail account connected through the Google Channel.
Zammad does not require an authenticated app to function with the google channel at all.
Following the documentation should be good enough to reach the goal - during documentation and verification process I didnāt do anything different, pinky promise: https://admin-docs.zammad.org/en/latest/channels/google/accounts/register-app.html
@sid sorry Iām getting confused and have issues to follow two topics in the same thread.
Floris is having issues with the google channel, youāre with the authentication. Thatās two different parts. If you still struggle, I think it would be best to create a new thread for better overview.
Iām currently not aware of any issues with either google channel or google authentication.
Appreciate your feedback !
Indeed i have an issue with authenticationā¦ " 500: Weāre sorry, but something went wrong." and "JWT::InvalidIatError "
I will open a new thread ! Thanks.
