authClient.login returning error with "Unauthorized request origin"

Question

This just started happening within the past few days, and my code hasn't changed. Have I made a mistake, or is this new?

It seems like it's implying there's a rule I should be adding to my security rules in firebase forge to allow access from the domain I'm working on (in this case localhost), but I don't know where to find that documentation.

Can anyone help? How do I get past this error?

Answer 1

With the release of Firebase Simple Login, which contains a number of OAuth-based authentication methods (Facebook, Twitter, GitHub, etc.), we included the idea of 'Authorized Origins'. Without this restriction, malicious sites could pretend to be your application and attempt to access your users' Facebook, Twitter, etc. data on your behalf.

By restricting the domains for these requests to ones that you control and have verified, we can protect your users' data.

To fix this error, log into Firebase Forge (by dropping your Firebase URL into your browser), and navigate to the 'Auth' panel on the left. You can configure multiple application domains here, comma-delimited. If you're interested in testing locally, set 127.0.0.1 in your application domain configuration, and ensure that you're accessing pages via http://127.0.0.1/..., rather than http://localhost/.... I hope that helps!