Can't reset password with identity-toolkit-python-client

[Krzysztof Wróbel]

Hello,

I have a two Identity toolkit configurations: one for preproduction and second for production. With both of them I can successfully login with Identity Toolkit on Android, iOS and Web with Gitkit widget.

However on my production configuration I cannot reset user password. Send email redirect is invoked, but when generating Oob code I get "invalid request" error.

gitkitclient.py

...

code = self.rpc_helper.GetOobCode(param)
if code:
  parsed = list(urlparse.urlparse(self.widget_url))

  query = dict(urlparse.parse_qsl(parsed[4]))
  query.update({'mode': mode, 'oobCode': code})
  parsed[4] = urllib.urlencode(query)

  return code, urlparse.urlunparse(parsed)
raise errors.GitkitClientError('invalid request')

...

Is there any way to get more detailed error why "code" variable is None when invoking self.rpc_helper.GetOobCode(param)?

[Krzysztof Wróbel]

Hello,

I have a strange situation. I do have a two projects configuration (PreProd and Prod) for Identity Toolkit. For both of them I'm able to successfully login on Android, iOS and Web apps. 

However I can not reset password on my Prod configuration. In server logs I'm seeing that my "Send email URL" gets invoked, but GitkitClientError("invalid request") is raised, when getting Oob code.

I suspect that None is returned and following code raises it

gitkitclient.py

...

code = self.rpc_helper.GetOobCode(param)
if code:
  parsed = list(urlparse.urlparse(self.widget_url))

  query = dict(urlparse.parse_qsl(parsed[4]))
  query.update({'mode': mode, 'oobCode': code})
  parsed[4] = urllib.urlencode(query)

  return code, urlparse.urlunparse(parsed)
raise errors.GitkitClientError('invalid request')

...

Is there any way to get more information, why a request is invalid?

[Jin Liu]

Can you get the password reset flow to work in your PreProd configuration? If yes, it is likely that the Google Service Account email/key in your Prod configuration file does not match the info in Google Developer Console. Feel free to contact me in private.

Jin