Btukfyl

I'm trying to set up Google sign-in using Flask dance for a flask based website:

from flask_dance.contrib.google import make_google_blueprint, google

blueprint = make_google_blueprint(

client_id= "CLIENT_ID",

client_secret="CLIENT_SECRET",

scope=[

    "https://www.googleapis.com/auth/plus.me",

    "https://www.googleapis.com/auth/userinfo.email",

]

)

app.register_blueprint(blueprint, url_prefix="/google_login")

And as the documentation suggests, I have the view set up like this:

@app.route('/google_login')

def google_login():

if not google.authorized:

    return redirect(url_for("google.login"))

resp = google.get("/oauth2/v2/userinfo")

assert resp.ok, resp.text

return "You are {email} on Google".format(email=resp.json()["email"])

When I was testing I set the environment variable, OAUTHLIB_INSECURE_TRANSPORT to 1 by using

export OAUTHLIB_INSECURE_TRANSPORT=1

And now even after I've removed the environment variable, for some reason the Flaskdance seems to always resolve the URI to a http instead of HTTPS.

This is evident from the redirect uri mismatch error I'm getting (here website refers to the domain name):

The redirect URI in the request, 

http://"website"/google_login/google/authorized, does not match 

the ones authorized for the OAuth client.

And here are the authorized redirect URIs I've set up in my Google cloud console:

https://"website"/google_login/google/authorized

https://www."website"/google_login/google/authorized

I tried unsetting the environment variable using this command:

unset OAUTHLIB_INSECURE_TRANSPORT

What am I missing here? Any help would be appreciated.