• In Spotfire, there is no way to use Google BigQuery through a proxy, since the HTTP listener that is started by the Analyst client is not listening to calls on 127.0.0.1, only on localhost."
• The reason the HTTP listener is using localhost is because of backward compatibility since the OAuth2 clients used by the Spotfire Analyst(created in the Google API console) previously used localhost.
• The customer is not allowed to use localhost and the OAuth2 standard also advice against using localhost (see below)

• To resolve this issue, TIBCO has added a preference called "LocalRedirectAddressTemplate" under,

Tools > Administration Manager > Group Name > Preferences > Google Authentication

Note: If you want to use separate settings for each connector, use the GoogleAnalytics and Google BigQuery preferences.

• You need to set the "Local RedirectAddressTemplate" to as below,

================
http://127.0.0.1:{0}/authorize/code
================
This preference can be used for overriding the default redirect address.

•  https://datatracker.ietf.org/doc/html/rfc8252#section-8.3