Amfysy

7 hours ago, Jesse Jost said:

@Yvan Morice  Please see PM with custom build instructions.

Hi Jesse, 

I have tested your build and have been able to login at the first attempt. As you should guess, the authentication token is usable in the 2021.06(041).

Thank you for your help and congratulations to the team for the reactivity, support as its best  .

Hi Jesse

I confirm an external browser is always opened after I validate the 2 way auth process on my phone.

I join a video where you can see all involved elements, cakewalk, my phone and an instance of my default browser (The 400 page that is opened at the beginning is from a previous authentication attempt)

Thank you for your answers

8 hours ago, pwalpwal said:

looks like the 400 comes from google rather than bandlab?

Indeed, so it could be a problem on google's side or the OAuth callback is not handled properly by the cakewalk auth in that specific case.

7 hours ago, Noel Borthwick said:

@Amfysy. Are you available to do some troubleshooting early this week to try and isolate the issue? PM me your contact info and we'll arrange a session.

I will be pretty busy during the next two weeks, but can do some tests or provide specific logs if you can tell me what you need and how to obtain them.

I'll PM you my info for the next steps.

Hello, 

The same behavior happens to me, on two different computers, which run the same version of Windows 10 (21H1 Build 19043.152).
The OS is in english and 

I'll try to add detail if it can help.

- In Cakewalk,  I click on "Browse Bandlab Projects"
- The Auth webview opens, I click on the Google icon
- I input my login and password, then click next
- The Webview displays the "2 step verification" page, I validate the notification on my phone
- The default browser of my OS is redirected to the error 400 page "https://accounts.google.com/signin/oauth/consent?authuser=0&part="
- The Cakewalk webview is still displaying the "2 step verification" page

It has been tested using Edge, Firefox and Chrome as my OS default browser

During the tests, I have captured the network traffic, most of it is done by the embedded cakewalk webview (msedgewebview2), the last two are done in the default browser

Quote

PROCESS    Result    Protocol    Host    URL        
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/cbp?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&MODE=init&zx=ao7i5z4n7rf1&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/cbp?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&TYPE=xmlhttp&zx=thnx9dk4rnvo&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/bind?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&RID=31182&CVER=5&zx=2koqqc38cuwz&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/bind?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&RID=rpc&SID=XXX&AID=0&TYPE=xmlhttp&zx=uqs0g07lqyhf&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/bind?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&RID=rpc&SID=XXX&AID=1&TYPE=xmlhttp&zx=cvnw33d2fyqr&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/bind?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&SID=XXX&RID=XXX&AID=1&zx=d3tn365sisp7&t=1    
WEBVIEW 200        HTTPS        17.client-channel.google.com    /client-channel/appchannel/bind?app_auth=XXXXX&ctype=device-prompt&gsessionid=XXXX&VER=8&RID=rpc&SID=XXX&AID=3&TYPE=xmlhttp&zx=qhede9hum1n1&t=1    
WEBVIEW 200        HTTPS        accounts.google.com    /_/signin/challenge?hl=fr&TL=XXX&_reqid=231169&rt=j    
WEBVIEW 200        HTTPS        accounts.google.com    /_/signin/challenge?hl=fr&TL=XXX&_reqid=331169&rt=j    
WEBVIEW 200        HTTPS        accounts.google.com    /_/signin/challenge?hl=fr&TL=XXX&_reqid=431169&rt=j    
WEBVIEW 302        HTTPS        accounts.google.com    /CheckCookie?hl=fr&client_id=XXX.apps.googleusercontent.com&chtml=LoginDoneHtml&service=lso&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3Dunknown%26part%3XXX&gidl=EgIIAA    
WEBVIEW 200        HTTPS        accounts.google.fr    /accounts/SetSID?ssdc=1&sidt=XXXcontinue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3D0%26part%3XXX&tcc=1    
BROWSER 302        HTTPS        accounts.google.fr    /accounts/SetSID?ssdc=1&sidt=XXXcontinue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fconsent%3Fauthuser%3D0%26part%3XXX&tcc=1    
BROWSER 400        HTTPS        accounts.google.com    /signin/oauth/consent?authuser=0&part=XXX&as=XXX&rapt=XXX    
 

I hope it can help.

Yvan.