PlatformException(sign_in_failed, com.google.GIDSignIn, keychain error, null) error even though "com.google.GIDSignIn" added as keychain group

[atreeon]

bug
Receiving this PlatformException(sign_in_failed, com.google.GIDSignIn, keychain error, null) when trying to sign in to google signin on macos. Stopped working randomly for both my apps on my personal macbook pro.
This closed issue #165 seems to suggest it is fixed but the comments say otherwise. It was working yesterday, I didn’t make a change to my app but today it has broken (possibly a pod update but that is all I can think of that has changed).

reproduce
Just create a new macos flutter app with googlesignin.

Expected behavior
Should log user in.

Screenshots

Environment
MacBook Pro
OS 14.2.1
Browser: Chrome

Additional context
Was working yesterday

Using these packages in Flutter (have downgraded some)

  firebase_core: ^3.7.0
  firebase_auth: ^5.3.2
  firebase_ui_auth: ^1.16.0
  firebase_crashlytics: ^4.1.4
  google_sign_in: ^6.2.2
  firebase_ui_oauth_google: ^1.4.0
  firebase_ui_localizations: ^1.13.0

[YoavGro]

Happening here also

[atreeon]

I tried it again today with a brand new project, cleared everything out, followed different instructions but still the same error.
Literally cannot sign in anymore.

[brnnmrls]

Hey, thanks for submitting your issue! Curious, what version of GTMAppAuth are you building with? I find this interesting to be happening on version 6.2.2.

Are you also able to print out the error GSI is giving you? Try setting a breakpoint here. Giving the return value of the SecItemAdd call could give more context on the error. Unfortunately, I was not able to repro the error on my end even with the latest version, so if you're able to recreate it consistently then that can help.

[atreeon]

Hi, thanks for getting back to me, the GTMAppAuth pod is on version 4.1.1.

I'm about to leave work now but it didn't hit the breakpoint. Is setPassword the correct method? I can try again tomorrow when I have a bit more time.

[brnnmrls]

Hmm, I believe you can also try setting breakpoints here and here and see if it lands on one of these.

Additionally, is this an issue on iOS devices too or is it just MacOS? We haven't had any significant changes to the flows that would spark up this error and I checked our sample apps that provide MacOS targets, but I'm still not able to repro the error. Any additional steps or information you can provide would be helpful.

[atreeon]

Hi,
in the GIDSignIn.m file (I have version 7.1.1 so the versions are slightly different)
if (!handlerAuthFlow.profileData) {
The profileData has data at this point so execution doesn't enter the if statement

in KeychainHelper.swift at line 100 the breakpoint is hit
guard status == noErr else {
status value is -25244
so it runs the
throw KeychainStore.Error.failedToDeletePassword(forItemName: service)

and yes, it does work on ios without any problems.

[brnnmrls]

According to https://www.osstatus.com/search/results?platform=all&framework=all&search=25244, it looks like the issue has to do with an invalid owner. In my experience I've seen that there could be a difference in naming or access rights and resolving those issues resulted in success. For example, this may happen if there's app renaming, re-signing of profiles/certificates, or the owner lacks necessary entitlements. I'd double check nothing is missing in that regard (maybe created with a missing entitlement).

[brnnmrls]

Closing this issue, but feel free to reopen if the issue persists and more information can be provided.

[atreeon]

@brnnmrls reopen? I couldn't resolve my problem so stopped supporting google login. I double checked all the naming and permissions but couldn't identify anything.

[tigernghk]

I have triggered the keychain error now.
When the system (macOS) asks "XXXX wants to use "login" keychain.", if the users cancel or deny it, "Keychain Error" will occur.
When typing correct password, the error will disappear.

I think the message makes the users hesitate to accept it.

[jungti1234]

I continue to suffer from that error.

PlatformException(sign_in_failed, com.google.GIDSignIn, keychain error, null)

I use MacOS 15.2, the problems came out of nowhere, and obviously weren't always present in 15.2 to me.
Me also, Keychain Sharing: "com.google.GIDSignIn" is already added. (That hasn't changed since the beginning.)

I have no idea what I could...

[Ansis100]

According to https://www.osstatus.com/search/results?platform=all&framework=all&search=25244, it looks like the issue has to do with an invalid owner. In my experience I've seen that there could be a difference in naming or access rights and resolving those issues resulted in success. For example, this may happen if there's app renaming, re-signing of profiles/certificates, or the owner lacks necessary entitlements. I'd double check nothing is missing in that regard (maybe created with a missing entitlement).

I'm pretty sure we changed something in the signing part of the build, so this makes sense. However, @brnnmrls, do you have any idea on what the best course of action would be for this? I'm guessing clearing the keychain and somehow regenerating the entries could help, but my fear is that this will only fix issues on my development machine and break the app for my users.

It seems like the issue persists and it would be nice to update the docs if the prerequisites for using this library on MacOS have changed (because of Apple changing some keychain specifics, for example). Is there any additional info I could provide to help fix this?