Meteor-up several domains

ivan133 · May 11, 2022, 2:05pm

Hi guys!
I’m using meteor up (https://meteor-up.com/)
I have an app that has 2 domains in “proxy.domains” and it works fine but google / fb auth does not works,
cause it redirects to the “main” domain the one that set in ROOT_URL.
Is there a way around it, other than create 2 docker instances with correct ROOT_URL?

ivan133 · May 11, 2022, 2:05pm

Maybe it is possible to do from account-google / account-common side
But I don’t think it’s a good idea to fork them

truedon · May 12, 2022, 2:23am

This isn’t related to mup. It’s just configuration.

OAuth requires your domain to be TLD the same as the one obtaining the token so you cannot use proxy domains due to security sandbox. You can only forward them to the ROOT_URL or a subdomain of that to authenticate. It’s better to do it all on one domain though because some browsers may crap out.

ivan133 · May 12, 2022, 5:35am

I partly agree.
But you can set several redirect urls in google project settings.
The issue is that meteor do not allow to set domain
The logic is here:

github.com

meteor/meteor/blob/4c293d329c9c24acd0c001afad6bcb6d2a4932d0/packages/oauth/oauth_common.js#L3

      
        
            OAuth._storageTokenPrefix = "Meteor.oauth.credentialSecret-";
            
            
OAuth._redirectUri = (serviceName, config, params, absoluteUrlOptions) => {
              // Clone because we're going to mutate 'params'. The 'cordova' and
              // 'android' parameters are only used for picking the host of the
              // redirect URL, and not actually included in the redirect URL itself.
              let isCordova = false;
              let isAndroid = false;
              if (params) {
                params = { ...params };
                isCordova = params.cordova;
                isAndroid = params.android;
                delete params.cordova;

igalya · March 11, 2024, 6:33am

Hi there, was wondering if there’s a solution to this issue.
Facing the same problem of not being able to use fb/google oauth from a second domain.

Thanks