OmniAuth::Strategies::OAuth2::CallbackError (csrf_detected | CSRF detected)

[ParthivPatel-BTC]

Cannot render console from 203.88.147.114! Allowed networks: 127.0.0.1, ::1, 127.0.0.0/127.255.255.255
(0.8ms) SELECT "schema_migrations"."version" FROM "schema_migrations" ORDER BY "schema_migrations"."version" ASC
I, [2018-01-08T16:53:35.868564 #22388] INFO -- omniauth: (ecwid) Callback phase initiated.
E, [2018-01-08T16:53:35.875967 #22388] ERROR -- omniauth: (ecwid) Authentication failure! csrf_detected: OmniAuth::Strategies::OAuth2::CallbackError, csrf_detected | CSRF detected
E, [2018-01-08T16:53:35.877131 #22388] ERROR -- omniauth: (ecwid) Authentication failure! invalid_credentials: OmniAuth::Strategies::OAuth2::CallbackError, csrf_detected | CSRF detected

OmniAuth::Strategies::OAuth2::CallbackError (csrf_detected | CSRF detected):

Any solution?

[amitpatelx]

@ParthivPatel-BTC there is a workaround omniauth/omniauth-oauth2#32. You can set :provider_ignores_state => true in omniauth.rb like

provider :ecwid, ENV['APPLICATION_ID'], ENV['SHARED_SECRET'], {:provider_ignores_state => true}