Is the Appinventor login using a YouTube integration for logon using Google?

MIT App Inventor Help
4

Thanks, Chris and Steve. I will pass this on to my Network Admin and let him know. Greatly appreciate it!

5

The Google sign-in process involves a redirect through a youtube domain, this is part of how Google accounts work, and afaik it can't be disabled.

7

Hello easrng

Never seen a hint of YouTube when logging into App Inventor via Google. Can you screenshot what you see please?

8

It's not a part of App Inventor. It is a part of the Google sign-in process in general. The sign-in form sends your password to https://accounts.google.com/_/signin/challenge, which redirects to https://accounts.google.com/CheckCookie which then reditects to https://accounts.youtube.com/accounts/SetSID.

9

....Would still like to see screenshots please, from the login form, to the point where you are unable to login.

The point being that until this week, The Teacher and Students were able to login to App Inventor. MIT has not changed anything and, since no other Users out of at least a hundred thousand this month have not reported a change or problem, it seems unlikely that Google has changed.

The process on my desktop, which is shared with other Google Account holders:

  1. Browser input: http://ai2.appinventor.mit.edu, which displays the 'Sign in with Google' form:

LoginForm

and the path:

https://accounts.google.com/o/oauth2/auth/oauthchooseaccount?state=8t1gm9s3AZglfFIELOerdGhBuOVRRL5y&redirect_uri=http%3A%2F%2Flogin.appinventor.mit.edu%2Fcomplete%2Fgoogle-oauth2%2F&response_type=code&client_id=xxxxxxxxxxxx-p6kuf1tm823g8vmvkpl7urs5r0gfasns.apps.googleusercontent.com&approval_prompt=force&scope=profile%20email&flowName=GeneralOAuthFlow

  1. On Account Selection, User is taken directly to http://ai2.appinventor.mit.edu and existing App Inventor projects are listed.
10

Open the network tab of the inspector before logging in, check preserve log, log in, then go back to the inspector and search for youtube. You will see that it has several invisible redirects when logging in to the account. This is not app inventor-specific behavior, and has been going on for many years.
@Joey_Ketcham if you could tell us if your students can log in to any Google websites at all it would be great, as the issue I think you are having would block all Google logins. The easy way to get around this issue would be to unblock accounts.youtube.com, leaving the rest of youtube blocked.

12

Here is a screenshot of what the student's get. They get to the "Sign in with Google" and select their account, then it immediately takes them to this page. The details shows it hitting YouTube which is why our network admin thinks there is some sort of YouTube integration and since we have YouTube blocked, that's why they can't access Appinventor.

screenshot1
screenshot11479×752 340 KB

13

easrng,

Students have no issues accessing any other sites using Google login.

14

You might test whether students can access any other sites using a "Sign in with Google" as recommended by @easrng

Possibly your IT could try whitelisting accounts.youtube.com See what happens. You could wait for an opinion from one of the MIT developers (who was invited to join this discussion) or just try whitelisting. His suggestion seems reasonable and might work. Hopefully you will have a solution for classes this week. Let us know what happens Joey. If it does not work; follow the advice provided in the link.

Another issue is IT might be blocking http addresses; allowing only https as a huge guess.

1 Like
15

SteveJG,

Many platforms we use within our district utilizes the Google login without any issues. Whitelisting YouTube isn't an option, we have it blocked due to a large number of students who abused the access to it during school hours so it was agreed upon across the board to block the access. We also do not block http addresses.

16

The recommendation was to try whitelist accounts.youtube.... but to BLOCK the rest of youtube as you do now at the same time. Block youtube and whitelist accounts. if that is possible.

1 Like
17

Ah, gotcha. I'll check with my network admin tomorrow and see if he can add that to the whitelist and see what happens. I'll post the results of that tomorrow, hopefully that works.

18

I think that is the key, nothing has changed recently with MIT or Google, so that suggests the School IT have changed something recently and hence the issue.

19

I had our network admin whitelist accounts.youtube.com and that did the trick. I'm guessing Google added a redirect to their Google sign in that goes through accounts.youtube.com because I did see today that many sites that students logged into via Google had the exact same issue, but all is good now.

Thanks for the replies, greatly appreciated!

1 Like
20

(added to FAQ)

21

We don't do any integration with YouTube. App Inventor uses the standard OAuth workflow that Google provides. If it's somehow going through accounts.youtube.com I think that is an issue with how Google is handling the auth flow. Another option if it continues to be a problem, you can use an alternative login mechanism by going directly to http://ai2.appinventor.mit.edu/login/google.

22

Are your students using a Chromebook?

23

7 posts were split to a new topic: RE: Is the Appinventor login using a YouTube integration for logon using Google?

24

Hi Sagnik_Chatterjee,

Yes students are using Lenovo N23 Chromebooks.

25

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.