Firebaseui-web: Facebook login throws "Error code: auth/internal-error"

[tptshoe]

Hi, I'm completely new to all this, so my apologies if this is not the place to post this...

I've set up firebaseui-web on a test project. Email/Password and Google login both work well, but Facebook login comes up with the error message above. Console log shows:

POST https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyAssertion?key=AIzaSyCS0knqsGspwJGp-xfKqRYPO-rX5B1kf8A 400 ()

As far as I can tell, I've done all of the configuration on both the Firebase and Facebook sides correctly.

[bojeil-google]

Did you happen to be migrating from Firebase V2? If not, make sure you have entered the correct client id and secret for Facebook in the Firebase Console. Also make sure you have configured your Facebook app correctly in the Facebook developer console.

[tptshoe]

I saw that there was an issue involved with migrating, so I created a new firebase project and a new facebook app. Still the same error.

Since Google login and email/password are both working, I think I'll leave it for now and keep an eye on this space for updates.

[bojeil-google]

I don't believe this is a migration issue. We will investigate this issue and get back to you.

[liujin-google]

Can you dump the http response for the POST request above (with 400 error)? For Chrome browser, the network trace can be seen in Debug Tools | Network.

[tptshoe]

Thanks for responding to my post, and so quickly! Here's the response I'm getting:

{
"error": {
"errors": [
{
"domain": "global",
"reason": "invalid",
"message": "Fail to fetch resource from https://graph.facebook.com/me?fields=id,email,picture,name,first_name,last_name,birthday,gender, http status is: 400, http response is: {\"error\":{\"message\":\"API calls from the server require an appsecret_proof argument\",\"type\":\"GraphMethodException\",\"code\":100,\"fbtrace_id\":\"G+O9hczeqXG\"}}"
}
],
"code": 400,
"message": "Fail to fetch resource from https://graph.facebook.com/me?fields=id,email,picture,name,first_name,last_name,birthday,gender, http status is: 400, http response is: {\"error\":{\"message\":\"API calls from the server require an appsecret_proof argument\",\"type\":\"GraphMethodException\",\"code\":100,\"fbtrace_id\":\"G+O9hczeqXG\"}}"
}
}

[tptshoe]

In case it helps, I've also put the code I'm running here:

https://github.com/tptshoe/authtest

[alfongj]

In your Facebook application settings, could you go to the Advanced Setting tab (you may need to click on the "Native or desktop app?" button), and ensure both of these are disabled:

• "Is App Secret embedded in the client?"
• "Require App Secret"

[tptshoe]

I just checked, and they are all set to "No" or disabled.

[liujin-google]

This is the first time we see the Facebook "API calls from the server require an appsecret_proof argument" error msg when "Require App Secret" is off. On this Wed the Firebase Authentication service will add the appsecret_proof param in the request to Facebook. If you still encounter the issue then, please let us know.

[tptshoe]

Just checked it and it's working great!! Thanks very much!

FirebaseUI is a HUGE timesaver for me, thank you!!!

[Vinq-it-JV]

Hi all, Just found that I had an IP address in the Facebook App's Server IP Whitelist (Settings/Advanced). After removing that and storing the change the error was gone!

[alexkendall]

@liujin-google Having this issue as of React Native 0.42

[infinityl00p]

Having this same issue as of React Native 0.52
Full Error Message:

{"error":{"errors":[{"domain":"global","reason":"invalid","message":"Unsuccessful debug_token response from Facebook: {\"error\":{\"message\":\"(#100) The App_id in the input_token did not match the Viewing App\",\"type\":\"OAuthException\",\"code\":100,\"fbtrace_id\":\"EpP6p3IVs3a\"}}"}],"code":400,"message":"Unsuccessful debug_token response from Facebook: {\"error\":{\"message\":\"(#100) The App_id in the input_token did not match the Viewing App\",\"type\":\"OAuthException\",\"code\":100,\"fbtrace_id\":\"EpP6p3IVs3a\"}}"}}

Note: i've checked my app id and app secret in firebase many...many...many times. Also have added my reroute url on facebooks dev console.

[SamiChab]

It happened to me after changing the App Id and App secret keys in firebase.
The new keys were not updated until I disabled and enabled the method again:

[i-Roma]

It happened to me after changing the App Id and App secret keys in firebase.
The new keys were not updated until I disabled and enabled the method again:

Great, thank you!

[zerobytes]

Hi all, Just found that I had an IP address in the Facebook App's Server IP Whitelist (Settings/Advanced). After removing that and storing the change the error was gone!

Saved my life dude . Thanks

[renejesusgv]

Hi all, Just found that I had an IP address in the Facebook App's Server IP Whitelist (Settings/Advanced). After removing that and storing the change the error was gone!

Yes, thank you man, you should only add an IP to the whitelist when debugging locally. Otherwise you will have this error.