Hi there,
Thank you so much for sharing this. It's very helpful, and we appreciate you taking the time to post it, even on an older thread.
You're right: if Cross-Origin-Opener-Policy is set to same-origin in the System - HTTP Headers plugin, the browser cuts the connection between the Instagram authorization popup and the SP Page Builder settings page. The token gets generated, but clicking Insert does nothing. Changing it to same-origin-allow-popups fixes this.
Since this thread has collected several solutions over time, here's a quick summary for anyone who lands here with the same problem:
- Use HTTPS on your live domain. The token generation needs a valid SSL certificate, and it may not work on localhost.
- Add the correct redirect URI in your Meta app's Login settings under Valid OAuth Redirect URIs:
https://your-domain.com/administrator/index.php?option=com_sppagebuilder&task=instagram.accessToken
- Check the Cross-Origin-Opener-Policy in System → Plugins → System - HTTP Headers and set it to
same-origin-allow-popups if it's currently same-origin. If you use another security extension, .htaccess rules or a CDN like Cloudflare, make sure none of them sends a stricter COOP header.
- Clear the Joomla cache and your browser cache, then click Generate Token again in SP Page Builder → Settings → Options.
Full setup guide: https://www.joomshaper.com/documentation/sp-page-builder/addons/media/instagram-gallery-access-token
If anyone still has trouble after trying these steps, please open a new question with your Joomla and SP Page Builder versions, and we'll be happy to help.
Best regards,