Google OAuth login fails with Firebase auth/requests-from-referer-http://localhost:3003-are-blocked

[Yashwant00CR7]

Description

Google OAuth login from the WindsurfAPI dashboard fails before authentication completes.

The dashboard is running locally and the Google Login button immediately returns a Firebase error.

Error

Google login failed: Firebase: Error (auth/requests-from-referer-http://localhost:3003-are-blocked.)

I also observed related requests to Firebase Identity Toolkit returning 403 errors.

Environment

• WindsurfAPI version: v2.0.144
• OS: Windows 11
• Runtime: WSL Ubuntu
• Dashboard URL: http://localhost:3003/dashboard
• Browser: Brave (also reproduced outside of Brave translation features)

What Works

• Manual account import
• Token-based authentication
• Language server installation
• /v1/models
• /v1/chat/completions
• OpenAI-compatible API access

The proxy itself is functioning correctly.

What Fails

• Dashboard → Google Login

The failure occurs before the Google authentication flow completes.

Investigation

The error appears to originate from Firebase authentication configuration.

The message suggests that requests originating from http://localhost:3003 are not allowed by the Firebase project configuration.

This could be caused by:

• Missing authorized domain in Firebase Authentication
• API key referrer restrictions
• Outdated Firebase configuration
• Recent Firebase policy/configuration changes

Reproduction Steps

1. Start WindsurfAPI
2. Open http://localhost:3003/dashboard
3. Click Google Login
4. Observe: Google login failed: Firebase: Error (auth/requests-from-referer-http://localhost:3003-are-blocked.)

Question

Is Google OAuth currently expected to work on localhost deployments?

If so, is there an updated Firebase configuration or setup step required?