[Fixed] Social Login 403 Forbidden error on Gridpane sites/servers

If you're trying to add Social Login to a site hosted on GridPane, chances are you've hit a 403 Forbidden error partway through the OAuth flow. It has nothing to do with your Google OAuth settings or whichever plugin you're using (Social Snap, LoginPress, or similar) – it's GridPane's 6G firewall blocking the request.

6G is aggressive about query strings, and the callback URL your social login plugin sends after authentication trips its rules. GridPane blocks it before it ever reaches WordPress, so all you see is a bare 403 with nothing useful in the browser to go on.

The fix

The reliable fix: go to GridPane > Sites > your website > Security tab, and turn off the 6G firewall for that site. Social login works immediately once it's off.

If you'd rather leave 6G switched on, GridPane can toggle its rulesets individually via GP-CLI. The OAuth callback URL is almost certainly tripping the Bad Query Strings ruleset specifically, so SSH in and run gp site yourwebsite.url 6g -bad-query-string off to disable just that one and keep the rest of 6G active. I haven't tested this exact command against a social login 403 myself, so if it doesn't do the trick, fall back to switching the whole firewall off instead.

Either way, you don't need to touch your OAuth settings or your plugin – the block happens before WordPress ever sees the request, so nothing on the WordPress side was ever broken.