auth/unauthorized-domain Authentication Origin: Application & API Last updated 13 Oct 2026

Firebase Auth: auth/unauthorized-domain — This domain is not authorized for OAuth operations for your Firebase project

The site’s domain isn’t listed in Firebase Authentication → Settings → Authorized domains.

Exact message you may see This domain is not authorized for OAuth operations for your Firebase projectEdit the list of authorized domains from the Firebase console
Seen on: REST API

Meaning

Firebase allows OAuth popups/redirects only from authorized domains. New production domains, preview deployments (Vercel/Netlify URLs), or 127.0.0.1 vs localhost cause it.

Common causes

  • Production/custom domain not added
  • Preview deployment domains
  • Using 127.0.0.1 instead of localhost

⚡ Quick fix

  1. Add the domain under Authentication → Settings → Authorized domains
  2. Use a stable preview domain
  3. Use localhost for local development

Detailed fix by platform

Firebase

  1. # Console → Authentication → Settings → Authorized domains → Add domain

How to diagnose

  1. Host — window.location.hostname
  2. List — Authorized domains

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

Where this error sits

Origin: Application & API. Errors that are often confused with or caused by this one (click to open):

AADSTS500113 — AADSTS500113: No reply address is registered for the application (Azure)AADSTS500113Access blocked: has not completed the Google verification process — Google OAuth: Error 403: access_denied — The developer hasn't given you access to this app / has not completed the Google verification process (Authentication)Access blocked: has n…access_denied — OAuth 2.0 Error: access_denied (The user or authorization server denied the request) (Authentication)access_deniedauth/invalid-credential — Firebase Auth: auth/invalid-credential (auth/wrong-password, auth/user-not-found, auth/invalid-login-credentials) (Authentication)auth/invalid-credenti…auth/network-request-failed — Firebase Auth: auth/network-request-failed — A network AuthError (such as timeout, interrupted connection or unreachable host) has occurred (Authentication)auth/network-request-…auth/popup-closed-by-user — Firebase Auth: auth/popup-closed-by-user / auth/popup-blocked / auth/cancelled-popup-request (Authentication)auth/popup-closed-by-…auth/too-many-requests — Firebase Auth: auth/too-many-requests — Access to this account has been temporarily disabled due to many failed login attempts (Authentication)auth/too-many-requestsbad_verification_code — GitHub OAuth: {"error":"bad_verification_code","error_description":"The code passed is incorrect or expired."} (Authentication)bad_verification_codeauth/unau…

Explore the map of this error Full error map →

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.

💬 What worked for others

No tips yet — did something else fix this for you?

Share what worked for you

Tips are checked by an editor before they appear. Links are removed.