Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

jjmu15's avatar

Access forbidden for oauth users

So I've got an app that doesn't have a traditional username/password login, just oauth login.

With this setup, I always get a 403 error when trying to access Nova in production despite the user being logged in successfully and their email being included inside the Nova Gate list as per the docs.

Do you have any idea how to solve this?

Thanks

0 likes
3 replies
bobbybouwmann's avatar

Is Nova using the same authentication guard?

Also, note that Nova runs using a session. So if you log in using oAuth, you need to make sure you set the session.

3 likes
jjmu15's avatar

Nova is currently using the default NOVA_GUARD and my app is using the session guard for web and passport for api

jjmu15's avatar

Sorry, the NOVA_GUARD value in my .env was not set.

I've just set it to match web as per my auth config file and I still see the same issue of a 403 page.

Please or to participate in this conversation.