# 403 : Forbidden - Jupyterhub EKS google oauth integration

**URL:** <https://discourse.jupyter.org/t/403-forbidden-jupyterhub-eks-google-oauth-integration/24585>\
**Category:** JupyterHub\
**Created:** [March 18, 2024, 1:33am UTC](https://discourse.jupyter.org/t/403-forbidden-jupyterhub-eks-google-oauth-integration/24585 "2024-03-18T01:33:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![rijoshk](https://avatars.discourse-cdn.com/v4/letter/r/d26b3c/32.png) [@rijoshk](https://discourse.jupyter.org/u/rijoshk)\
**Post date:** [March 18, 2024, 1:33am UTC](https://discourse.jupyter.org/t/403-forbidden-jupyterhub-eks-google-oauth-integration/24585/1 "2024-03-18T01:33:51Z")

</div>

Greetings,  
I am setting up Jupyterhub on AWS EKS for our entrprise. I am trying to integrate the hub with google OAuth, however i am thrown, " 403 : Forbidden Sorry, you are not currently authorized to use this hub. Please contact the hub administrator." and then refreshing the page gets me " 400 : Bad Request OAuth state missing from cookies". We have other services using google oauth successfully.

following is the hub configuration

hub:  
config:  
GoogleOAuthenticator:  
client\_id: …  
client\_secret: “GOCSPX-yM…wJ-Db”  
oauth\_callback\_url: [hub.sypht.com/hub/oauth\_callback](http://hub.sypht.com/hub/oauth_callback)  
hosted\_domain:  
- [sypht.com](http://sypht.com)  
login\_service: “Sypht JupyterHub”  
JupyterHub:  
authenticator\_class: google  
admin\_access: false

I see the following error on my hub pod

### kubectl logs hub-685d49f46-glsv8 -n jhub

User ‘ray.easo’ not allowed.  
[Failed login for unknown user

I fail to understand what is causong this issue  
Thanks

---

<div class="post-metadata">

**Author:** ![consideRatio](https://yyz1.discourse-cdn.com/flex031/user_avatar/discourse.jupyter.org/consideratio/32/1033_2.png) [@consideRatio](https://discourse.jupyter.org/u/consideRatio)\
**Post date:** [March 18, 2024, 6:51am UTC](https://discourse.jupyter.org/t/403-forbidden-jupyterhub-eks-google-oauth-integration/24585/2 "2024-03-18T06:51:02Z")

</div>

You need one or more allow configurations set, becsuse nothing currently allows user access in that config. If you want all users (that also pass the hosted domain restriction in place), you can use OAuthenticator.allow\_all = True

---

<div class="post-metadata">

**Author:** ![rijoshk](https://avatars.discourse-cdn.com/v4/letter/r/d26b3c/32.png) [@rijoshk](https://discourse.jupyter.org/u/rijoshk)\
**Post date:** [March 19, 2024, 3:51am UTC](https://discourse.jupyter.org/t/403-forbidden-jupyterhub-eks-google-oauth-integration/24585/3 "2024-03-19T03:51:09Z")

</div>

Thanks, that resolves, wonder if the documentation had this information or if i missed something