[GH-ISSUE #249] Google Drive example fails with missing state error #143

New issue

Closed

opened 2026-03-03 16:46:04 +03:00 by kerem · 4 comments

kerem commented

2026-03-03 16:46:04 +03:00

Owner

Originally created by @iby on GitHub (Jul 8, 2016).
Original GitHub issue: https://github.com/OAuthSwift/OAuthSwift/issues/249

Using responseType = "token" works, but the original responseType = "code" fails with Missing state error. Need to use code type in order to get refresh token, base on the playground notes.

OS targeted (with version): 10.11
OAuth provider: Google Drive OAuth 2.0
OAuthSwift version: latest release

Originally created by @iby on GitHub (Jul 8, 2016). Original GitHub issue: https://github.com/OAuthSwift/OAuthSwift/issues/249 Using `responseType = "token"` works, but the original `responseType = "code"` fails with `Missing state` error. Need to use `code` type in order to get refresh token, base on the [playground](https://developers.google.com/oauthplayground/) notes. - **OS targeted (with version):** 10.11 - **OAuth provider:** Google Drive OAuth 2.0 - **OAuthSwift version:** latest release

kerem

2026-03-03 16:46:04 +03:00

closed this issue
added the
help wanted
label

kerem commented

2026-03-03 16:46:05 +03:00

Author

Owner

@phimage commented on GitHub (Jul 8, 2016):

maybe this could work by setting allowMissingStateCheck to true (if state missing)
let me know

@phimage commented on GitHub (Jul 8, 2016): maybe this could work by setting `allowMissingStateCheck` to true (if state missing) let me know

kerem commented

2026-03-03 16:46:05 +03:00

Author

Owner

@iby commented on GitHub (Jul 8, 2016):

Yep, it works, but refresh_token in credentials provided as an empty string. Any ideas why would that be?

@iby commented on GitHub (Jul 8, 2016): Yep, it works, but `refresh_token` in credentials provided as an empty string. Any ideas why would that be?

kerem commented

2026-03-03 16:46:05 +03:00

Author

Owner

@phimage commented on GitHub (Jul 8, 2016):

Did we pass in the code defined bellow in OAuthSwift2 (code which affect the refresh token

if let refreshToken = responseParameters["refresh_token"] as? String {
                self.client.credential.oauth_refresh_token = refreshToken.safeStringByRemovingPercentEncoding
            }

@phimage commented on GitHub (Jul 8, 2016): Did we pass in the code defined bellow in OAuthSwift2 (code which affect the refresh token ``` swift if let refreshToken = responseParameters["refresh_token"] as? String { self.client.credential.oauth_refresh_token = refreshToken.safeStringByRemovingPercentEncoding } ```

kerem commented

2026-03-03 16:46:05 +03:00

Author

Owner

@iby commented on GitHub (Jul 8, 2016):

Yes, there is that check in the code. Apparently must provide additional parameters approval_prompt=force&access_type=offline – they are used in the playground and access_type is reported to be the one that enforces refresh_token being sent with the response.

@iby commented on GitHub (Jul 8, 2016): Yes, there is that check in the code. Apparently must provide additional parameters `approval_prompt=force&access_type=offline` – they are used in the playground and `access_type` is reported to be the one that enforces `refresh_token` being sent with the response.

kerem referenced this issue

2026-03-03 16:49:18 +03:00

[PR #143] [MERGED] Fix #129 by adding OAUTH_APP_EXTENSIONS setting var #532