# Make.com Gmail Connection Error (CSRF Token Validation Failed)

**URL:** <https://community.make.com/t/make-com-gmail-connection-error-csrf-token-validation-failed/108735>\
**Category:** Questions\
**Tags:** error, connections\
**Created:** [May 12, 2026, 6:02am UTC](https://community.make.com/t/make-com-gmail-connection-error-csrf-token-validation-failed/108735 "2026-05-12T06:02:24Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Luke\_Bowen](https://avatars.discourse-cdn.com/v4/letter/l/ec9cab/32.png) [@Luke\_Bowen](https://community.make.com/u/Luke_Bowen)\
**Post date:** [May 12, 2026, 6:02am UTC](https://community.make.com/t/make-com-gmail-connection-error-csrf-token-validation-failed/108735/1 "2026-05-12T06:02:24Z")

</div>

I’m building an automation in [Make.com](http://Make.com) using Google Sheets and Gmail.

The workflow was working earlier, but now when I try reconnecting Gmail or adding a Gmail module, I get this error:

“Access denied. CSRF token validation failed while requesting /connections…”

I’ve already:

- refreshed the page
- tried reconnecting Gmail
- used Google Chrome
- allowed popups
- logged into the correct Google account

Google Sheets modules still work, but Gmail connection is failing.

How do I fix the CSRF token validation error for Gmail connections in [Make.com](http://Make.com)?

---

<div class="post-metadata">

**Author:** ![samliew](https://dub1.discourse-cdn.com/flex013/user_avatar/community.make.com/samliew/32/13327_2.png) [@samliew](https://community.make.com/u/samliew)\
**Post date:** [May 12, 2026, 11:33am UTC](https://community.make.com/t/make-com-gmail-connection-error-csrf-token-validation-failed/108735/4 "2026-05-12T11:33:52Z")

</div>

Welcome to the Make community!

How are you performing the Gmail connection? This might help:

# How to Connect and Use Google APIs in Make!

# 0. Prerequisites

- 
## 0.1. You need to have a Google account

Make sure you can sign in to [Google Cloud Console](https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.cloud.google.com&flowName=GlifWebSignIn) with this.

- 
## 0.2. Create a Google Cloud Platform (GCP) project

Follow this main help centre guide on [How to set up a custom OAuth 2.0 custom app in Make](https://www.make.com/en/help/apps/it-and-development/g-suite-admin#connecting-to-google-services-using-oauth2).

# 1. Enable Google APIs

- 
## 1.1. Enable the relevant APIs that you want to use

**Search for the relevant Google API here:** [https://console.cloud.google.com/apis/library](https://console.cloud.google.com/apis/library)

  - Go to each API page that you want to use, end click “Enable”

  - Usually you’ll want to enable at least [Drive](https://console.cloud.google.com/apis/api/drive.googleapis.com) (includes Docs/Sheets) and [Gmail](https://console.cloud.google.com/apis/api/gmail.googleapis.com).

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/d/4/d4727c4eee0426b3415b3cc285eb46d47d9dc6ad.png)

* * *

# 2. Create OAuth Client

**Direct Link:** [https://console.cloud.google.com/apis/credentials](https://console.cloud.google.com/apis/credentials)

- 
## 2a. Create “OAuth client ID” Credentials

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/0/c/0c29e0e6bb6d6b4b62461a894fb490c1e06dd048.png)

- 
## 2b. Insert all the Google Redirect URIs for your app

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/2/8/2807e342c37d019fedbe8847450f96a19c696ffe.png)

### Insert All Google Redirect URIs

Here are some commonly-needed redirect URIs you need for your [Google Cloud Console](https://console.cloud.google.com/) OAuth app. If you set these up, you can reuse the same GCP app for other Google apps and modules on Make.

```plaintext
https://www.make.com/oauth/cb/oauth2
https://www.make.com/oauth/cb/google
https://www.make.com/oauth/cb/google/
https://www.make.com/oauth/cb/google-email
https://www.make.com/oauth/cb/google-custom
https://www.make.com/oauth/cb/google-restricted
https://www.make.com/oauth/cb/google-cloud-speech
https://www.make.com/oauth/cb/google-search-console
https://www.make.com/oauth/cb/google-analytics-4
https://www.make.com/oauth/cb/google-ads2
https://www.make.com/oauth/cb/google-ads2/
https://www.make.com/oauth/cb/youtube
https://www.make.com/oauth/cb/chrome

```

#### Including These Google Redirect URIs

You are also **required** to insert the legacy URLs below from the old Integromat system that not been migrated to Make yet (same as the above list, but replace “make” with “integromat”):

```plaintext
https://www.integromat.com/oauth/cb/oauth2
https://www.integromat.com/oauth/cb/google
https://www.integromat.com/oauth/cb/google/
https://www.integromat.com/oauth/cb/google-email
https://www.integromat.com/oauth/cb/google-custom
https://www.integromat.com/oauth/cb/google-restricted
https://www.integromat.com/oauth/cb/google-cloud-speech
https://www.integromat.com/oauth/cb/google-search-console
https://www.integromat.com/oauth/cb/google-analytics-4
https://www.integromat.com/oauth/cb/google-ads2
https://www.integromat.com/oauth/cb/google-ads2/
https://www.integromat.com/oauth/cb/youtube
https://www.integromat.com/oauth/cb/chrome

```

> **Note 1:** Due to inconsistencies in Make’s implementation of the connections, there are two separate entries where has one is `google` and another ending in a forward slash `google/` - you might need one or the other, so we have to use both!

> **Note 2:** Once you’ve set these up, you can use/reuse the same Google OAuth App ID + Secret for all the supported Google connections and modules on Make - you’ll just have to enable the relevant [Google APIs](https://console.cloud.google.com/apis/library)!

* * *

# 3. OAuth consent screen

**Direct Link:** [https://console.cloud.google.com/apis/credentials/consent/edit](https://console.cloud.google.com/apis/credentials/consent/edit)

- 
## 3a. Insert Two Authorised Domains

  - Insert `make.com` and `integromat.com`

  - Fill in other required fields

  - Click “Save and Continue”.  

- 
## 3b. Add All Scopes

  - Click “Add or Remove Scopes”

  - Select 100 “Rows per page”, for each page, check all the rows, OR

  - Manually type in the scopes you need

  - Click “Update” at the bottom

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/3/e/3ebb5ef4860a9d7319450f72c21ef0d9380e7d25.png)

- 
## 3c. Skip Verification

  - Step through until you reach back to the dashboard

  - At the last step/page, click “ **BACK TO DASHBOARD** ” instead of “Prepare for Verification”  
 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/0/c/0c8fe7b5be5b0fec74f940524cefe93259806a7c.png)

- 
## 3d. Publish the GCP OAuth2 app

You will need to set your OAuth application to “Production”, otherwise the credentials expire very frequently.

  - To do this, go back to “[OAuth consent screen](https://console.cloud.google.com/apis/credentials/consent)”

  - Then click the “ **PUBLISH APP** ” button

  - Then click the “ **CONFIRM** ” button

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/2/4/2457e224474366c4a1c1707cc1b79d3db4facfe0.png)

* * *

# 4. Create New Connection (HTTP, or respective Google module)

You can find the Client ID and Client Secret in the OAuth2 app you created in GCP, on the right-hand side of where you inserted the callback URLs in step 2:

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/a/e/aeb4ff9ca8e4f5ddf3badd144b4f5a4fb19f27ef.png)

- 
## 4a. Specific Google module (Sheets, Docs, Drive, Gmail, etc.)

Insert the GCP app client ID and secret here **BEFORE** clicking “Sign in”

_(Gmail example)_

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/c/a/caa6efb63fb50b12399549ee627da8bb29189a13.png)

**OR,**

- 
## 4b. HTTP OAuth 2.0 Request module

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/8/9/89a1c01d161c36bc11d1e7460256be7e02258d18.png)

You need a “Authorize Parameters” key of `redirect_uri` with the above Make OAuth2 callback URL.

 ![](https://europe1.discourse-cdn.com/flex013/uploads/make/original/3X/4/3/43df2cd92abedfda53a23fc12991dbfb13eff1be.png)

* * *

**Related Topics:**

- [Gmail/Google Drive verification issues (error 400): how to solve](https://community.make.com/t/gmail-google-drive-verification-issues-error-400-how-to-solve/27432)

— @samliew  
P.S.: investing some effort into the tutorials in the [Make Academy](https://academy.make.com) will save you lots of time and frustration using Make!

---

<div class="post-metadata">

**Author:** ![Make\_Bot](https://dub1.discourse-cdn.com/flex013/user_avatar/community.make.com/make_bot/32/14661_2.png) [@Make\_Bot](https://community.make.com/u/Make_Bot)\
**Post date:** [August 12, 2026, 6:48am UTC](https://community.make.com/t/make-com-gmail-connection-error-csrf-token-validation-failed/108735/6 "2026-08-12T06:48:16Z")

</div>


