Access control using google groups not working

[prashant-prodigal]

#

Bug description

Access control through google groups is not working

Expected behaviour

Users should be able to login using google SSO

Actual behaviour

Getting 500 error on user login

How to reproduce

1. Configure the SSO using advanced settings in this doc https://tljh.jupyter.org/en/latest/howto/auth/google.html
2. Configuration of the .py file in this step. Below is the config used:

from oauthenticator.google import GoogleOAuthenticator
c.JupyterHub.authenticator_class = GoogleOAuthenticator

c.GoogleOAuthenticator.google_service_account_keys = {'abc.com': '/opt/tljh/service_account_key.json'}
c.GoogleOAuthenticator.gsuite_administrator = {'abc.com': 'user.name'}
c.GoogleOAuthenticator.allowed_google_groups = {'abc.com': ['jupyterhub-users']}
c.GoogleOAuthenticator.admin_google_groups = {'abc.com': ['jupyterhub-admins']}
c.GoogleOAuthenticator.client_id = 'censored'
c.GoogleOAuthenticator.client_secret = 'censored'
c.GoogleOAuthenticator.hosted_domain = 'abc.com'
c.GoogleOAuthenticator.login_service = 'Google'
c.GoogleOAuthenticator.oauth_callback_url = 'https://jupyterhub.abc.com/hub/oauth_callback'

Note- I have removed the sensitive information.
3. Run sudo tljh-config reload command
4. When user try to login using Google SSO, he get 500 error. Error screenshot attached.

Your personal set up

• OS:
  Ubuntu 22.04
• Version(s):
  tljh latest version

Full environment

# paste output of `pip freeze` or `conda list` here

Configuration

# jupyterhub_config.py

Logs

[welcome]

Thank you for opening your first issue in this project! Engagement like this is essential for open source projects! 🤗

If you haven't done so already, check out Jupyter's Code of Conduct. Also, please try to follow the issue template as it helps other other community members to contribute more effectively.

You can meet the other Jovyans by joining our Discourse forum. There is also an intro thread there where you can stop by and say Hi! 👋

Welcome to the Jupyter community! 🎉

[MridulS]

Could you look/share at logs https://tljh.jupyter.org/en/latest/troubleshooting/logs.html?
It should give you a bit more information about the error :)

[prashant-prodigal]

is this configuration that i provided correct? @MridulS

[prashant-prodigal]

This is resolved, we needed to enabled Google Admin SDK API in google cloud console for this, which was not mentioned in the documentation, can we add this in documentation?