title: Permission denied to generate login hint for target domain when hosted on AWS
body: <p>website link to assist in troubleshooting: <a href="http://ec2-54-227-148-233.compute-1.amazonaws.com/architect/" rel="nofollow noreferrer">http://ec2-54-227-148-233.compute-1.amazonaws.com/architect/</a></p>
  
  <p>I'm trying to launch Anyplace Architect on my own server.  I've gone into the google developer console and set my key &amp; Authorized JavaScript origins to my site, but when I hit the site, I get the following:</p>
  
  <p><a href="https://i.stack.imgur.com/NvwSG.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/NvwSG.png" alt="enter image description here"></a></p>
  
  <p>In the developer console, I see:</p>
  
  <pre><code>Request URL:https://accounts.google.com/o/oauth2/iframerpc?action=listSessions&amp;client_id=964916910124-bv0kcgd7lrbhblvc0okebbhahitnnerl.apps.googleusercontent.com&amp;origin=http%3A%2F%2Fec2-54-227-148-233.compute-1.amazonaws.com&amp;scope=openid%20profile%20email&amp;ss_domain=http%3A%2F%2Fec2-54-227-148-233.compute-1.amazonaws.com
  Request Method:GET
  Status Code:400 
  Remote Address:10.15.8.202:8080
  Referrer Policy:no-referrer-when-downgrade
  </code></pre>
  
  <p>When I lunch locally it works perfectly, and I don't even see that request within networking tab on the developer console in chrome.</p>
  
  <p><a href="https://i.stack.imgur.com/AAWVA.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/AAWVA.png" alt="enter image description here"></a></p>
  
  <p>Both localhost:5000 &amp; the AWS site are on the approved list from google</p>
  
  <p><a href="https://i.stack.imgur.com/Tjucw.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Tjucw.png" alt="enter image description here"></a></p>
  
  <p>UPDATE:</p>
  
  <p>This might just be my ignorance of how the sign-in tool works, but I've been able to find out the calls for localhost and my hosted environment are different.  The localhost address goes to google.com/signin/oauth/oauthchooseaccount:</p>
  
  <pre><code>https://accounts.google.com/signin/oauth/oauthchooseaccount?client_id=964916910124-bv0kcgd7lrbhblvc0okebbhahitnnerl.apps.googleusercontent.com&amp;as=woofRlZRVjxqKYzi0Xbttw&amp;destination=http%3A%2F%2Flocalhost%3A5000&amp;approval_state=!ChRhQmpLNEZRVHZJVEo2TW4xUHZwbhIfd3hHcnJMMDRJYlVkMEs2dFEwd1Nsa3YxeWR4ZUt4WQ%E2%88%99AB8iHBUAAAAAWs-i2_Lj-7nWLqvZjcwt3RArM0a3r6wB&amp;xsrfsig=AHgIfE9BSG8q4mj-GBLin4PQT5-zv5fhhQ&amp;flowName=GeneralOAuthFlow
  </code></pre>
  
  <p>while the hosted goes to google.com/o/oauth2/auth</p>
  
  <pre><code>https://accounts.google.com/o/oauth2/auth?redirect_uri=storagerelay%3A%2F%2Fhttp%2Fec2-54-227-148-233.compute-1.amazonaws.com%3Fid%3Dauth422135&amp;response_type=code%20permission%20id_token&amp;scope=openid%20profile%20email&amp;openid.realm=&amp;client_id=964916910124-bv0kcgd7lrbhblvc0okebbhahitnnerl.apps.googleusercontent.com&amp;ss_domain=http%3A%2F%2Fec2-54-227-148-233.compute-1.amazonaws.com&amp;access_type=offline&amp;include_granted_scopes=true&amp;prompt=consent&amp;origin=http%3A%2F%2Fec2-54-227-148-233.compute-1.amazonaws.com&amp;gsiwebsdk=2
  </code></pre>