Google SSO login blocked in Electron tab (“This browser or app may not be secure” / WebView disallowed) — cannot sign into chatgpt.com if account uses “Continue with Google”

[MathewH]

Description

What happened

When trying to sign into https://chatgpt.com inside Agentify Desktop’s Electron tab window using “Continue with Google”, Google blocks the login flow.

On Windows, the flow often first triggers a Windows Security (WebAuthn) prompt requesting a USB security key (even if the user never set one up). After cancelling / continuing, Google shows:

• “Anmeldung nicht möglich”
• “Dieser Browser oder diese App ist unter Umständen nicht sicher. Verwenden Sie einen anderen Browser.”

(English: “This browser or app may not be secure. Use a different browser.”)

Because my ChatGPT/OpenAI account was originally created with Google SSO, the “email login” path redirects back to Google as well, so there’s no way to sign in from within the app.

Steps to reproduce

1. Install dependencies and start the app:
   • npm i
   • npm run start
2. Open the ChatGPT tab/window (chatgpt.com).
3. Click “Log in” → “Continue with Google”.
4. Attempt to complete Google sign-in.

Expected behavior

Google sign-in completes successfully and the ChatGPT session becomes authenticated inside the Agentify Desktop tab.

Actual behavior

Google blocks the sign-in inside the embedded Electron browser and shows “This browser or app may not be secure / Anmeldung nicht möglich”.

Environment

• OS: Windows 10 Pro
• Agentify Desktop: main branch (e7bff84)
• Node.js: (24.12)
• npm: (11.6.2)
• Login method: ChatGPT account created via Google SSO (“Continue with Google”)

[coldshalamov]

I just had to disable popup blocking in the Agentify browser and it worked

[waml]

TODO : Add "disable popup blocking" to README

[mimeonline]

I have the same problem on MacOS Tahoe. Where I can disable the popup blocking?

[waml]

@MathewH @mimeonline @coldshalamov

Thanks for the report I pushed a fix in #12 and merged it.

Root cause was popup blocking; Google/SSO auth needs a popup window in this flow. The PR adds a constrained auth-popup allowlist plusa contorl center toggle (allow auth popups) so login can complete without opening popups broadly.

[waml]

found an issue and patched it in #27

awaiting test

[waml]

reported working closing