Invalid success param when using OAuth2 login

[schoolofai]

hi i am having issues with using google oauth for login - I am using react native sdk - it all works when on expo go , but when i installed it to testfight it stops working - and when trying to login with google - in get invalid sucess param should be one of - localhost .... etc . here is my sign in code -

    let redirectUri = makeRedirectUri({ preferLocalhost: true });
    console.log("Redirect URI:", redirectUri);

    const url = await account.createOAuth2Token(
      "google",
      redirectUri,
      redirectUri,
      [
        "profile",
        "email",
        "https://www.googleapis.com/auth/youtube",
        "https://www.googleapis.com/auth/youtube.force-ssl",
        "https://www.googleapis.com/auth/youtube.upload",
        "https://www.googleapis.com/auth/youtubepartner",
      ]
    );
    console.log("URL:", url);
    if (!url) {
      throw new Error("Failed to create OAuth2 session");
    }

    const result = await openAuthSessionAsync(url.href, redirectUri);
    console.log("Auth session result:", result);

    if (result.type === "success") {
      if ("url" in result) {
        const resultUrl = new URL(result.url);
        const secret = resultUrl.searchParams.get("secret");
        const userId = resultUrl.searchParams.get("userId");
        if (!secret || !userId) return;
        await account.createSession(userId, secret);
        const user = await account.get().catch((e) => {
          console.warn(e);
          return null;
        });
        console.log("user:", user);

see the screen shot for google cloud credentials
Image

[stnguyen90]

@schoolofai, thanks for creating this issue! 🙏🏼 Could you please share exactly what the redirectUri is when running via TestFlight? It's likely the hostname in the URL hasn't been registered in your Appwrite project yet.

[stnguyen90]

So, at the moment, Expo will create deep links like:

• Development and production builds: <scheme>://path - uses the optional scheme property if provided, and otherwise uses the first scheme defined by your app config
• Web (dev): https://localhost:19006/path
• Web (prod): https://myapp.com/path
• Expo Go (dev): exp://128.0.0.1:8081/--/path

Appwrite will try to validate the host part of the URL against the allowed web platforms to protect against open redirect attacks so you'll get a 400 error like:

Invalid success param: URL host must be one of: localhost, cloud.appwrite.io, appwrite.io

It's impossible to change RN to include a hostname or you may run into a path not found error when redirect back into the RN app.

We'll have to discuss internally about how to handle react native.

[stnguyen90]

appwrite/appwrite#9262 was merged but then reverted due to issues during QA. We'll need to fix the issues with another PR.

[Nizam-shan]

same issue here general_argument_invalid working fine in ios simulation and expo qr code run issue in android emulator
export async function login() {
try {
// need to generate redirect uri for oauth response (once go to google it has to move back to application again (can use expo module foe handling deep links))
const redirectUri = Linking.createURL("/");

// padding redirect url and auth provider
const response = await account.createOAuth2Token(
  OAuthProvider.Google,
  redirectUri
);
if (!response) throw new Error("Failed to Login");

const browserResult = await openAuthSessionAsync(
  response.toString(),
  redirectUri
);
if (browserResult.type !== "success") throw new Error("Failed to login");
const url = new URL(browserResult.url);

[mnkyjs]

I have the same problem, here is my current implementation

import { getQueryParams } from "expo-auth-session/build/QueryParams";
import { openAuthSessionAsync } from "expo-web-browser";

----

const createSessionFromUrl = async (url: string) => {
  try {
    const { params, errorCode } = getQueryParams(url);

    if (errorCode) throw new Error(errorCode);
    const { secret, userId } = params;

    if (!secret || !userId) return;

    return await account.createSession(userId, secret);
  } catch (error) {
    console.error("Error creating session from URL:", error);
    throw error;
  }
};

  signWithOAuth: async (provider: OAuthProvider) => {
    const url = await account.createOAuth2Session(
      provider,
      "myCoolAppwriteApp://(authenticated)",
      "myCoolAppwriteApp://auth",
      ["openid", "profile"]
    );

    if (!url) throw new Error("Failed to create OAuth2 session");

    const res = await openAuthSessionAsync(
      url.toString(),
      "myCoolAppwriteApp://home"
    );

    if (res.type === "success") {
      const { url } = res;

      if (!url) throw new Error("Failed to create session from URL");

      await createSessionFromUrl(url);
    }
  },

[Nizam-shan]

Did u find any solution Is this our implementation problem or appwrite issue in local ecpo its working fine because its localhost the deep link concept is not working

…

On Fri, 28 Mar, 2025, 5:00 pm Dennis Hundertmark, ***@***.***> wrote: I have the same problem, here is my current implementation import { getQueryParams } from "expo-auth-session/build/QueryParams";import { openAuthSessionAsync } from "expo-web-browser"; ---- const createSessionFromUrl = async (url: string) => { try { const { params, errorCode } = getQueryParams(url); if (errorCode) throw new Error(errorCode); const { secret, userId } = params; if (!secret || !userId) return; return await account.createSession(userId, secret); } catch (error) { console.error("Error creating session from URL:", error); throw error; }}; signWithOAuth: async (provider: OAuthProvider) => { const url = await account.createOAuth2Session( provider, "myCoolAppwriteApp://(authenticated)", "myCoolAppwriteApp://auth", ["openid", "profile"] ); if (!url) throw new Error("Failed to create OAuth2 session"); const res = await openAuthSessionAsync( url.toString(), "myCoolAppwriteApp://home" ); if (res.type === "success") { const { url } = res; if (!url) throw new Error("Failed to create session from URL"); await createSessionFromUrl(url); } }, — Reply to this email directly, view it on GitHub <#34 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A2VPJ3C4HUUREW242XTFS5L2WUQDDAVCNFSM6AAAAABQYN6EECVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDONRRGEYDCOJTGU> . You are receiving this because you commented.Message ID: ***@***.***> [image: mnkyjs]*mnkyjs* left a comment (appwrite/sdk-for-react-native#34) <#34 (comment)> I have the same problem, here is my current implementation import { getQueryParams } from "expo-auth-session/build/QueryParams";import { openAuthSessionAsync } from "expo-web-browser"; ---- const createSessionFromUrl = async (url: string) => { try { const { params, errorCode } = getQueryParams(url); if (errorCode) throw new Error(errorCode); const { secret, userId } = params; if (!secret || !userId) return; return await account.createSession(userId, secret); } catch (error) { console.error("Error creating session from URL:", error); throw error; }}; signWithOAuth: async (provider: OAuthProvider) => { const url = await account.createOAuth2Session( provider, "myCoolAppwriteApp://(authenticated)", "myCoolAppwriteApp://auth", ["openid", "profile"] ); if (!url) throw new Error("Failed to create OAuth2 session"); const res = await openAuthSessionAsync( url.toString(), "myCoolAppwriteApp://home" ); if (res.type === "success") { const { url } = res; if (!url) throw new Error("Failed to create session from URL"); await createSessionFromUrl(url); } }, — Reply to this email directly, view it on GitHub <#34 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A2VPJ3C4HUUREW242XTFS5L2WUQDDAVCNFSM6AAAAABQYN6EECVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDONRRGEYDCOJTGU> . You are receiving this because you commented.Message ID: ***@***.***>

[subhodeep2005s]

I having same issue
Error 400

Invalid 'success' param: URL host must be one of: localhost, appwrite.io, *.appwrite.io, fra.cloud.appwrite.io, *

Type

general_argument_invalid

[ammarfaris]

appwrite/appwrite#9262 was merged but then reverted due to issues during QA. We'll need to fix the issues with another PR.

@stnguyen90 so what's the solution now?

[solomonojox]

Has anyone gotten a solution yet?

[VARN0R]

...
export async function login() {
  try {
  
    const redirectUri = Linking.createURL("/");

    console.log("Redirect URI:", redirectUri);

    const response = await account.createOAuth2Token(
      OAuthProvider.Google,
      redirectUri
    );
...

When launching the project via expo, everything works and is displayed in the console:
Redirect URI: exp://192.168.100.8:8082/--/

And with the native build for Android, error 400 and console output:
Redirect URI: com.varn0r.findroute:///

Maybe this will help you solve the problem somehow.🙏

[mnkyjs]

I found this article quiet helpful and was able to enable OIDC Provider (Keycloak) and get everything to work.

https://bishwajeet-parhi.medium.com/i-built-an-auth-template-powered-by-react-native-and-appwrite-4a0b7ee90ba6