Short answer
The request to Firebase Auth never got an answer. Open the browser’s network tab and retry: a blocked or failed request to identitytoolkit.googleapis.com or securetoken.googleapis.com shows the cause. Common ones are an ad blocker or privacy extension, a Content Security Policy that leaves out Google’s hosts, the app still pointing at the Auth emulator, or a form that reloads the page mid-request.
What blocks the request, most likely first
01
A real network failure
“Thrown if a network error (such as timeout, interrupted connection or unreachable host) has occurred.” Firebase, firebase.auth.Error
Weak mobile data, a captive portal or a VPN can drop the request. Retry once with a short delay, and show a clear “check your connection” message instead of the raw code.
02
A blocker, firewall or Content Security Policy
If only some users fail, ask what browser extensions or office network they use. If everyone fails on the live site but not locally, check the site’s Content Security Policy: it must allow Google’s auth hosts for requests, and apis.google.com and your project’s firebaseapp.com domain for popup and redirect sign-in.
03
The app still points at the emulator
A connectAuthEmulator call left in the production build sends every sign-in to localhost, which fails for real users. Only connect the emulator in development.
04
The page reloads during sign-in
A sign-in button inside a form without preventDefault reloads the page and cancels the request, which Firebase reports as a network error. It’s one of the first things we check in AI-built login screens.
Checked against the vendor’s docs on : Firebase reference: firebase.auth.Error; Firebase docs: Best practices for signInWithRedirect.
Rather hand it over?
Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.
- from $450App Fix TicketOne reproducible bug in an existing mobile or web app, diagnosed and fixed.See scope and start
- from $450AI-Built App RescueA Lovable, Bolt or Cursor app checked end to end in 3 days, then its worst problems fixed at a fixed price.No issues worth fixing, no charge. If the Launch Check finds nothing rated medium or higher, Simon refunds the full $450. You keep the report either way.See scope and start
Related: Firebase auth/unauthorized-domain · Firebase Google sign-in popup blocked · Firebase auth/too-many-requests · Firebase auth/invalid-api-key in production