Fixing Google OAuth with django-allauth on Custom Domain

I've identified several issues with your Google OAuth configuration that are likely causing the problems with your custom domain. Let's address them one by one:

Issues Identified

1. Mismatched Redirect URI: There's a domain mismatch in your redirect URIs. You have jobs.skip.community instead of jobs.example.com.

2. JavaScript Origin Typo: There's a typo in your JavaScript origins - you have example-jobs.example.com instead of example-jobs.onrender.com.

3. Django Site Configuration: You're using SITE_ID = 1, but you may need to properly configure the Site model in Django's admin to match your custom domain.

Solutions

1. Fix Google OAuth Client Settings

Update your Google OAuth client configuration with these correct values:

Authorized JavaScript origins:

TEXTCopied
https://jobs.example.com
https://example-jobs.onrender.com

Authorized redirect URIs:

TEXTCopied
https://jobs.example.com/accounts/google/login/callback/
https://example-jobs.onrender.com/accounts/google/login/callback/

2. Configure Django Site Framework

Django-allauth uses Django's Site framework to determine callback URLs. You need to ensure your Site model is properly configured:

1. Access Django admin at https://jobs.example.com/admin/
2. Navigate to Sites under the Django section
3. Edit the existing site (ID 1) or create a new one:
   • Set domain name to jobs.example.com
   • Set display name to your site name

If you're using multiple domains, you may need to create separate Site entries and update your settings:

PYTHONCopied
# For custom domain
if 'jobs.example.com' in request.get_host():
    settings.SITE_ID = 1  # ID of jobs.example.com site
else:
    settings.SITE_ID = 2  # ID of example-jobs.onrender.com site

3. Update Your Settings

Modify your settings.py to ensure proper site configuration:

PYTHONCopied
SITE_ID = 1
ACCOUNT_DEFAULT_HTTP_PROTOCOL = 'https'

# Remove SITE_URL as it's not a standard Django setting
# SITE_URL = 'jobs.example.com'  # Remove this

# Keep these settings
USE_X_FORWARDED_HOST = True
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTO', 'https')
ALLOWED_HOSTS = ['jobs.example.com', 'example-jobs.onrender.com']
CSRF_TRUSTED_ORIGINS = ['https://jobs.example.com', 'https://example-jobs.onrender.com']

# Add these settings for django-allauth
SOCIALACCOUNT_PROVIDERS = {
    'google': {
        'APP': {
            'client_id': 'your-client-id',
            'secret': 'your-client-secret',
            'key': ''
        }
    }
}

4. Check Your Middleware

Ensure you have the proper middleware for handling multiple domains:

PYTHONCopied
MIDDLEWARE = [
    # ... other middleware
    'django.contrib.sites.middleware.CurrentSiteMiddleware',
    # ... other middleware
]

After making these changes, restart your application and try the Google login flow again from your custom domain.