kimsia
kimsia3mo ago

[Solved] Admin account and Google oAuth use the same email - how to resolve? Self hosted

So my admin account for self-hosted is using the same email as my google oAuth. So when i tried to login as google I get this error message I cannot change the email of the admin as well. What do I do?
No description
51 Replies
rubenf
rubenf3mo ago
you have to delete your password account first would advise having a backup password account that is an admin
kimsia
kimsia3mo ago
how to delete? and is there a way to directly change the emal of the password account?
kimsia
kimsia3mo ago
where can i report a bug?
No description
kimsia
kimsia3mo ago
i also used the wmill cli user management to remove the user account which i wanted to use google oauth with. but once i logged in with that user account, i get this message
kimsia
kimsia3mo ago
No description
kimsia
kimsia3mo ago
how do i assign it to the right workspace?
rubenf
rubenf3mo ago
What's the bug ? You need to use quote for zsh to accept * And you need to add your user to your desired workspace by having the admin of that workspace add it or set auto add
kimsia
kimsia3mo ago
i am getting this
No description
rubenf
rubenf3mo ago
Is your current user a super admin ?
kimsia
kimsia3mo ago
i did do this
No description
rubenf
rubenf3mo ago
And did you switch user afterwards ?
kimsia
kimsia3mo ago
and by current user, you mean the user in the browser or the cli? i removed the original user so that i can add that user via google oauth
rubenf
rubenf3mo ago
CLI, you're in the cli
kimsia
kimsia3mo ago
how do i switch to a different user in the CLI? i. have been looking in the manual and i don't quite see it
rubenf
rubenf3mo ago
Then you need to delete and add the workspace again in the cli
kimsia
kimsia3mo ago
delete? can't i just logout of current user somehow from the cli? ok i figured out. i need to go to settings > instance and make that now google oauth user as superadmin i still cannot add gmail
kimsia
kimsia3mo ago
gmail api is added to the project "windmill access"
No description
kimsia
kimsia3mo ago
this is my credentials
No description
kimsia
kimsia3mo ago
No description
kimsia
kimsia3mo ago
client ID starts with 337675 client secret is GOCSP
kimsia
kimsia3mo ago
i have it in instance settings
No description
kimsia
kimsia3mo ago
i am logged in using google oauth successfully
kimsia
kimsia3mo ago
i needed to add the gmail oauth which was n't documented anywhere
No description
kimsia
kimsia3mo ago
i used the same client ID and client secret
kimsia
kimsia3mo ago
when i add a resource, then it shows up.
No description
kimsia
kimsia3mo ago
No description
kimsia
kimsia3mo ago
and now i get this
No description
kimsia
kimsia3mo ago
i have also tried to do a brand new client ID this time with a different authorized url i am guessing so i used http://localhost/oauth/callback/gmail
No description
No description
kimsia
kimsia3mo ago
i changed the oauth for gmail client id and client secret in the windmill
kimsia
kimsia3mo ago
this time i got further but i am unsure if windmill access is referring to the API project name or the client ID
No description
kimsia
kimsia3mo ago
this time i saw this
No description
kimsia
kimsia3mo ago
then nothing happened
No description
kimsia
kimsia3mo ago
No description
rubenf
rubenf3mo ago
you click allow and drawer close ? do you have the same issue on app.windmill.dev ?
kimsia
kimsia3mo ago
yes i click allow then i got the following images you saw i haven't tried it on app.windmill.dev i will try that next. i got to go wokr on anotjher project
rubenf
rubenf3mo ago
the docs is also open-source, feel free to send PR and feedback if you feel the docs is lacking on those aspect https://github.com/windmill-labs/windmilldocs
GitHub
GitHub - windmill-labs/windmilldocs
Contribute to windmill-labs/windmilldocs development by creating an account on GitHub.
kimsia
kimsia3mo ago
i cannot try this on app.windmill.dev because 1. same email has already been used for another account that uses github as oauth 2. being not a superadmin in demo workspace in app.windmill.dev means i cannot delete that account and recreate using a different login. Please help. also on app.windmill.dev doesn't allow me access to instance.settings unsure if this is a blocker
kimsia
kimsia3mo ago
also when i tried to add resource using gdrive, then i get this
No description
kimsia
kimsia3mo ago
I feel like this feature isn't really working?
rubenf
rubenf3mo ago
no it is working the screen above is fine, we just have to go through verification again with google
kimsia
kimsia3mo ago
so i'll wait for the verification first?
rubenf
rubenf3mo ago
you can just click on "Advanced' and then continue
kimsia
kimsia3mo ago
ok after i added the resource, how do I see it?
No description
kimsia
kimsia3mo ago
also how do i remove access to the gdrive once i am done experimenting? never mind. i figured out how
rubenf
rubenf3mo ago
Do you not see the resources after adding it and saving it ?
kimsia
kimsia3mo ago
oh i get it now. when i switched to using chrome away from edge I can now see the form to add the resource and save it
kimsia
kimsia3mo ago
No description
rubenf
rubenf3mo ago
got it, we will take a look with ms edge
kimsia
kimsia3mo ago
I’ve knocked off work so I will try to replicate on loom tomorrow to show u ok never mind i think the issue is due to one of my extensions in edge. no idea which one it is. i will find out. i also just realizd that it's ok to NOT use google for login and still use gmail as resource since it's an extension isssue, i won't create the loom
kimsia
kimsia3mo ago
What I owe windmill: 1. a suggested PR on how to add gmail as resource on the docs Note to self: - take this https://www.windmill.dev/docs/misc/setup_oauth#oauth-resources and make it more like https://www.windmill.dev/docs/integrations/gmail or simply link the two currently unsure. will decide again on weekend
Gmail Integration | Windmill
Gmail is a free email service provided by Google.
Setup OAuth and SSO | Windmill
Windmill supports Single Sign-On for Microsoft, Google, GitHub, GitLab, Okta, and domain restriction.
rubenf
rubenf3mo ago
🙏