@minamt,
Can you please try disable one by one below settings and check if any one of below setting making issue. Mostly due to one of the below settings conflict is.
1) WP Security > Firewall > PHP Rules – WP REST API Can you please cross check the Disallow unauthorized REST requests:
2) Deny bad query string – WP Security > Firewall > PHP rules tab. URL Security – Deny bad query strings: uncheck the checkbox and save
3) Advanced char filter – WP Security > Firewall > PHP rules tab. – String filtering Enable advanced character string filter :uncheck the checkbox and save
4) 5g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable legacy 5G firewall protection uncheck the checkbox and save
5) 6g firewall rules – WP Security > Firewall > 6G Blacklist firewall rules tab. Enable 6G firewall rules – uncheck the checkbox and save
Please let me know if it solves the issue. I will try create an internal ticket for this.
Regards
Thread Starter
minamt
(@minamt)
Hi,
I tried all of these options one by one, but none of theme solved the issue, until I disable the whole plugin.
Hi @minamt,
Can you please try add below constant in wp-config.php one by one and check if it solves the issue.
define( 'AIOS_NO_FIREWALL', true);
If you have login whitelist of IPs enabled
define( 'AIOS_DISABLE_LOGIN_WHITELIST', true );
If you have the Brute force > Rename login page, Brute force > Cookie base brute force and Brute force> Captcha if enabled please try disable them and check.
If still the issue “Login with google” which plugin/theme being used. Is it free or paid plugin / theme please provide more details for it.
I will create an internal ticket so some howe we can replicate that issue and solve it.
Regards
Thread Starter
minamt
(@minamt)
Hi,
I have tried these solutions but the problem persists, I’m using Nextend plugin for Google login free version, and Casamia theme paid version
Hi @minamt,
Ok, can you please export AIOS setting WP security > Settings > Import / Export and share it to us using https://pastebin.com/, you may use burn after read option so can be read once only.
I will create an internal ticket to check in details.
Regards
Thread Starter
minamt
(@minamt)
Hi @minamt,
We have imported settings and try with Nextend Social Login. It works fine.
Can you please let me know what exact issue is?
Here can you make sure you have correct redirect URL (with the renamed login path) under:
Google Cloud Console > Clients > OAuth 2.0 Client IDs > Edit OAuth client > Authorized redirect URIs.
For example, instead of the default: https://yourdomain.com/wp-login.php?loginSocial=google
It should now be: https://yourdomain.com/{renamed_login}/?loginSocial=google
If the authorized redirect URI doesn’t exactly match their renamed login URL, Google will throw the redirect_uri_mismatch error.
Regards
