5

I configured Google Cloud IAP for AppEngine, and then, when I try to access my app, I login to my google account, and I am redirected to this url:

project-id.appspot.com/_gcp_gatekeeper/authenticate?state=long-state-string&scope=email%20openid%20https://www.googleapis.com/auth/userinfo.email&authuser=2&hd=domain.com&session_state=a23b09e8ae90697d931d96068fdcf163a7a71010..9268&prompt=consent

This page just shows the following error, and nothing else matters:

There was a problem with your request. Error code 11

Tried looking for logs everywhere but in vain. @Matthew Sachs Do you have any idea ?

Mehdi Benmoha
  • 3,694
  • 3
  • 23
  • 43

1 Answers1

6

Experienced this when setting up a new project and the solution was to turn IAP off and then back on again.

Not a great answer but hopefully will help.

Al Stevens
  • 499
  • 5
  • 6
  • 1
    Hopefully we will get a better answer! – Al Stevens Mar 27 '19 at 14:30
  • Glad you were able to get this resolved! The one case I've seen this in is when the client ID and client secret that IAP is configured with are wrong. If this happens again, I'd be curious to know whether the values shown in https://cloud.google.com/appengine/docs/admin-api/reference/rest/v1/apps/get match the client ID and secret in https://console.cloud.google.com/apis/credentials . To check the client secret v. IAP's "sha256" hash, you can use a tool like echo -n secret | sha256sum, or Python https://pastebin.com/f9EUKECL – Matthew Sachs Apr 03 '19 at 19:56
  • Will update this and get those values for you if we encounter it again. Thanks Matthew. – Al Stevens Apr 05 '19 at 15:40
  • Thank you so much! I think that if ssl cert has changed then IAP need refresh (turn off and on). – giotr Mar 22 '22 at 14:51