Getting "Bad Request" back after authenticating

[chromakey]

After authenticating against google, I'm getting "Bad Request: The browser (or proxy) sent a request that this server could not understand." messages.

I'm using the default material in the docs with my IDs, Secret, and Redirect for what I have from Google. I'm hosting on Heroku if that matters.

googlelogin = GoogleLogin(app)
@app.route('/oauth2callback')
@googlelogin.oauth2callback
def create_or_update_user(token, userinfo, **params):
user = User.filter_by(google_id=userinfo['id']).first()
if user:
user.name = userinfo['name']
user.avatar = userinfo['picture']
else:
user = User(google_id=userinfo['id'],
name=userinfo['name'],
avatar=userinfo['picture'])
db.session.add(user)
db.session.flush()
login_user(user)
return redirect(url_for('estimator'))

[marksteve]

Are you using https?

[chromakey]

Nope. The site is just a basic calculator that I only want employees to have access to. I don't need any profile information, posting permissions, storing of credentials, etc. Since we're already using Google Apps, it would make life a lot easier on me if they could just authenticate using their accounts and then use the calculator.

[isokrates]

Three years later, I am getting exactly the same error. I've been trying to use this example: https://gist.github.com/ashish01/2a4a0f9b525096633ca2. Any ideas?

[Focshole]

To fix this, enable HTTPS. Google refuses HTTP connections (i don't remember where Google wrote this). Anyway, to switch to HTTPS, just add
app.config.update(GOOGLE_LOGIN_REDIRECT_SCHEME="https")
to Flask app. It should be set as default, instead of http