Illegal Request on Google module (tiger 7.1.0 fresh install)

When I tried to setup an google Account i get an illegal request (see screenshot attached)

I did:

• fresh install of 7.1.0 of tiger
• added Client ID / Client Secret to modules/Google/connectors/Config.php
• added urls to oauth: http://{
  There was an error rendering this math block. KaTeX parse error: Expected 'EOF', got '}' at position 9: site_URL}̲/index.php?modu…
  site_URL}/index.php?module=Google&view=List&operation=sync&sourcemodule=Contacts&service=GoogleContacts and http://{$site_URL}/index.php?module=Google&view=Authentificate&service=Google
• Setup of Account ends up with error as shown in screenshot. any idea?

of course &amp ; is just & in URL

in /includes/HTTP/Request.php i commentet line 212 to 214:

/*		if ((stripos($_SERVER['HTTP_REFERER'], $site_URL) !== 0) && ($this->get('module') != 'Install')) {
			throw new Exception('Illegal request');
		}*/

and than it works. serious? i thought 7.1 should be stable. actually it crashed the whole system...

@flipflop.Joe - URLs added to OAuth seem to be wrong. From where did you copy this? It should be having view=Authenticate see the Redirect URI suggested.

NOTE: Please do not arrive to conclusion so fast on the issues. Staying focused to identifying the cause is more important.

Please re-open if you find further lead on it.

Status changed to closed

I only added the suggested URL mentioned in vtiger to OAuth:

1.: http://{$site_URL}/index.php?module=Google&view=Authentificate&service=Google

When I try to add or change the Google account i get the "illegal request" error. After commenting the lines in /includes/HTTP/Request.php mentioned above, i can successfully add/Change Google user. there is no issue on syncing data after the user is added successfully.

so it is only an issue to add/Change the Google user account.

Status changed to reopened

@flipflop.Joe - can you please share the screenshot you added in Google OAuth settings account? I'm unable to reproduce the issue.

@flipflop.Joe - I retried on other domain with fresh install and it worked as expected. Closing this issue. Please re-open with more details and relevant screenshot to help reproduce the issue.

Status changed to closed

Here is the screenshot. Error occurs on 7.1.0 fresh install wehen trying to add new Google user.

Status changed to reopened

@flipflop.Joe - ok. What do you mean by error occurs when adding new user? Where - can you provide step by step instruction to reproduce the issue.

Steps to reproduce:

1. fresh install of 7.1.0 of tiger
2. added Client ID / Client Secret to modules/Google/connectors/Config.php
3. go to Settings > Google and hit button "Sign in with google"
4. enter credentials
5. Hit button "Allow Access" (in Screenshot "Zulassen"
6. Illegal Request occurs

@prasad This happens when the URL is not localhost. In that case, you will see a warning from Google about the app not being review by Google and ask you if you wish to continue.

If you say yes, then you are redirected back to the auth process. By now, the referred value is change to the google.com URL instead of the crm.

@cmaggi The error you mention happens between step 4 and 5 (after you filled in login information and before trying to access Google Account) if the app is not reviewed by google. 5CFC40F8-E2F0-40BE-B8BD-8C389C64E1D1

I have the exact same issue and can provide the same screenshots.

This was my workaround. Probably there is a better solution

if ((stripos($_SERVER['HTTP_REFERER'], $site_URL) !== 0) && (($this->get('module') != 'Google' && $this->get('view') == 'Authenticate') || ($this->get('module') != 'Install'))) {
				throw new Exception('Illegal request');
			}

includes/http/Request.php line ~ 212

Conrado. I tried adding your code and I am still gettting the error.

@david.maples Sorry. I just edited. try it now

@cmaggi If module is not Google, view can not be Authenticate. With your Code it is ok not to be in install OR Google module. Code changes (not testes jet):

if ((stripos($_SERVER['HTTP_REFERER'],

site_URL) !== 0) && (

this->get('module') != 'Install') && ((

this->get('module') != 'Google') || (

this->get('view') != 'Authenticate')) { throw new Exception('Illegal request'); }

Tested and working:

if ((stripos($_SERVER['HTTP_REFERER'], $site_URL) !== 0) && ($this->get('module') != 'Install') && (($this->get('module') != 'Google') || ($this->get('view') != 'Authenticate'))) {
	throw new Exception('Illegal request');
}

could be merged @prasad ?

@flipflop.Joe - instead of tweaking if... see if you can turn-off request for validation in Authentication action.

@prasad worked through files in /modules/Google and can not find the place to do so. any hint / solution?

@flipflop.Joe @prasad

Thank you. @flipflop.Joe's workaround connects Vtiger to Google but when I tested the calendar sync (Calendar - List View - Google Sync Log) it shows it created events in Google, but checking the Google calendar the events do not display.

Any idea as to why?

Hi, looks like the solution doesn't work for me. With if ((stripos($_SERVER['HTTP_REFERER'],

site_URL) !== 0) && ((

this->get('module') != 'Google' &&

this->get('view') == 'Authenticate') || (

this->get('module') != 'Install'))) { throw new Exception('Illegal request'); } i still get the exception.. with the code /* if ((stripos($_SERVER['HTTP_REFERER'],

site_URL) !== 0) && (

this->get('module') != 'Install')) { throw new Exception('Illegal request'); }*/ i don't get any error message, but it looks like nothing has been done. I can reopen the procedure and start again.

I have vtiger 7.1 but migrated from a 6.5 installation

Any thoughts? @flipflop.Joe @prasad

Update: I managed to get the sync working. I realized that for whatever reason, my database did not had all required tables such as "vtiger_google_sync_settings", "vtiger_google_sync_fieldmapping","vtiger_google_sync", "vtiger_google_oauth2". By creating them manually without any content, i managed to get the sync set up.

@Shanoviachan

So when you sync (using @flipflop.Joe's workaround)the calendar and contacts they are appearing in Google? That's what I can't understand. It syncs but does not post in Google.

Status changed to closed by commit b26a5a1b

Hi @flipflop.Joe , I'm tagging you because you seem to be the more knowledgeable on the issue. I hope youcan help me.

I was having the illegal request issue. I then applied the patch in commit b26a5a1b and I didn't get the illegal request error anymore. However, after that nothing happens. The following settings page refreshes, but then nothing happens:

How is the sync triggered?

Sorry, found the answer to my question. Just go to Contacts or Calendar list view and go to Extensions -> Google in the left panel. However I now have a different but related problem: #1084