OAUTH2 issues / reverse proxy?

themanbornwithin

Unfortunately giving users the ability to consent on behalf of the organization does not work. It still goes as follows:

Access osTicket site via IP > Email > Config > Fill out Microsoft login > Accept Permissions > Goes back to osTicket Main Page via Proxy URL

themanbornwithin

Clicking the Config button when accessing the site via Proxy returns this

themanbornwithin

I was finally able to rectify this issue. I ran Fiddler (an awesome tool for diagnosing web sites, definitely worth a look) and found that IIS was throwing errors because of a colon in the URL (A potentially dangerous Request.Path value was detected from the client (:).) (The request was GET /scp/ajax.php/email/5/auth/config/mailbox/oauth2:msmail HTTP/1.1). I used the following in my web.config to bypass the colon, and success!!

<system.web>
    <httpRuntime 
        requestPathInvalidCharacters="&lt;,&gt;,*,%,&amp;,\,?" />
    </system.web>

themanbornwithin

I was able to successfully configure an e-mail account by brute force.

-I connected to the site via IP
-I changed the Redirect URI to the IP of the server using HTTPS (which isn't configured on the server)(https://0.0.0.0/api/auth/oauth2)
-I added the URL to Azure
-I went through the config process. When it returns, the page fails to load due to not having HTTPS on. I changed the URL in the browser to HTTP, and it uploaded the token to osTicket
-osTicket imported the pending mail