Login fails when third-party cookies are disabled

[sourcesync]

If you disable third-party cookies, then the login fails with this error:

Apparently many people have this setting by default and don't even know it.

The only solution seems to be a server-side authentication flow. Any work-arounds ?

google/google-api-javascript-client#260

[thecmdrunner]

Still no workaround for this?

[MylesWardell]

A workaround.

You wont get google profile infomation but you will get an auth token that validates on the backend. From this the backend request can get firstName, lastName, email, profileImage ect. I got tipped off when I saw a site work with 3rd party cookies disabled using redirectUri which adds this information via queryParams so it should be possible using uxMode="redirect" as well.

  const [token, setToken] = useState<string>()

  useEffect(() => {
    const handleAuthMessage = ({ data }) => {
      try {
        const responseObject = JSON.parse(data)
        if (responseObject?.method === 'fireIdpEvent') {
          setToken(responseObject?.params?.authResult?.id_token)
        }
      } catch (error) {
        return
      }
    }

    window.addEventListener('message', handleAuthMessage)

    return () => {
      window.removeEventListener('message', handleAuthMessage)
    }
  }, [])