“Missing initial state” after choosing a Google account

The error reads: “Unable to process request due to missing initial state. This may happen if browser sessionStorage is inaccessible or accidentally cleared. Some specific scenarios are – 1) Using IDP-Initiated SAML SSO. 2) Using signInWithRedirect in a storage-partitioned browser environment.”

Under 10 seconds · read-only

What Firebase’s docs say

On browsers that block third-party storage access, redirect sign-in needs one of five setups. Firebase’s docs: “Starting June 24 2024, implementing one of the options will be required for redirect sign-in to work on Google Chrome M115+.” The options are: a custom domain as authDomain on Firebase Hosting, signInWithPopup, proxying /__/auth/, self-hosting the helper files, or handling provider sign-in yourself.

Source: Best practices for using signInWithRedirect (read 24 Oct 2026, can change).

What the free check shows

  • When your config states the authDomain literally, whether Google’s sign-in will name your domain or <project>.firebaseapp.com. Otherwise the card says “Google sign-in name: not confirmed”.
  • Whether your own code calls signInWithRedirect, signInWithPopup or both.

If your app uses redirect sign-in and its authDomain isn’t your own domain, the Signhome fix pack has the proxy route for Cloudflare Workers on your own domain, tested end to end in our lab on 24 Oct 2026; on another host, run the free check and leave your email, and we’ll tell you when yours is ready. We haven’t reproduced this error in a bot test, so we don’t promise any route removes it.

FAQ

What if it doesn’t work for me?

On Cloudflare Workers, it works or you get your money back within 14 days. Our refund policy says: “Works or your money back. If within 14 days you've followed the pack and Google's sign-in still doesn't show your domain, email support with your re-check link. We'll help you fix it, and if we can't, we refund you in full.” It covers apps served by Cloudflare Workers, the hosting setup we’ve tested, and sits alongside your rights under UK consumer law. Full terms: https://pewterkit.com/refunds

Do I need to be a developer?

Your fix pack has a paste-ready prompt for your AI builder, the exact snippet we tested, and a re-check that runs the free check on your app again, so you can see the name Google’s sign-in shows after your change.

Is the check safe?

It’s read-only. It reads your public page and its same-origin scripts, the same page any visitor can open, and sends no cookies. It never asks for a sign-in, a password or access to your accounts.

Which hosts does it cover?

Cloudflare Workers on your own domain. In our lab on Cloudflare Workers, Google’s sign-in showed our own domain (re-checked 24 Oct 2026). A workers.dev address can’t show your own domain at sign-in. You need a domain you own. On Cloudflare Pages, Firebase Hosting, Vercel or Netlify, run the free check, pick your host and leave your email: we’ll email you once when yours is ready.

What’s in the fix pack?

It’s built from the check we ran on the domain you entered: the exact snippet we tested for your host, the two console settings to change with the click path to each, a paste-ready prompt for your AI builder, and a re-check. One-time payment, no subscription.