Cookies are disabled error when trying to login to Gmail in Brave Browser

@H.Ali

Thank you for taking the time, to produce the screenshots.

My best guess of the moment …

The hoverzoom.js (Console screenshot) might be a script of the Hover Zoom+ extension; Console message:

Uncaught (in promise) SecurityError: Failed to read the 'sessionStorage' property from 'Window': Access is denied for this document.
at prepareImgLinks (hoverzoom.js:2458:41)
at init (hoverzoom.js:4088:13)
at applyOptions (hoverzoom.js:2609:13)
at hoverzoom.js:2646:17

That extension may be interfering. Test by disabling that (and other extensions); but also remove Hover Zoom+ / HoverZoom, if you have it.

(NOTE: From the Chrome Web Store: “This is an open source version of the original HoverZoom extension which is now overrun by malware and deleted from store.”)

Extensions Tests:
  • test by disabling all extensions
  • test by enabling each extension individually
  • test by uninstalling all extensions
  • test by installing each extension individually
  • test combinations of extensions
  • test order of installation of extensions

Brave is probably somehow frustrating the Google sign-in flow - possibly in regard to accessing the third-party/cross-site storage that Google’s Multi-site Unified Login Eco-System expects. The following Developer Tools > Console lines may be a tell-tale of the sign-in flow problem:

POST
https://accounts.google.com/v3/signin/ /AccountsSignInUI/browserinfor?f.sid-=...
400 (Bad Request)


Short list of Google domain names and hostnames associated with, related to, Google’s Unified Login:

  • [*.]accounts.google.com
  • [*.]google.com
  • [*.]gstatic.com
  • [*.]mail.google.com
  • [*.]recaptcha.net
  • [*.]workspace.google.com
  • [*.]www.google.com
  • [*.]www.youtube.com

That short list, is from around 120 Google Eco-System domain names and hostnames.

In a Brave Browser New Window, go to: brave://settings/content/javascript and scroll down to the Allowed to use JavaScript section, and there, Add those Google domain names and hostnames.

In a Brave Browser New Window, go to: brave://settings/cookies and, in the Sites allowed to use third-party cookies section, Add those Google domain names and hostnames.

In a Brave Browser New Window, go to: brave://settings/content/braveShields and, in the Shields Down section, Add those Google domain names and hostnames.

So, regarding third-party cookies and Brave Shields, you are effectively rating Google’s Eco-System as Most Trusted.

Brave Browser effectively waving a very detailed ID badge at every challenge, in the Google World Order.

PS. Re the other Console screenshot, Brave Browser is storing cookies.