OAuth login suddenly stopped working

souvikint2021

I have created an instance to login via drupal. I have used OAuth server module in drupal to get all client credentials and provided the credentials in the OSTicket Instance. But when I tried to login via auth, it redirects me again to the home page without login. I have checked the drupal error log but there are no issues.

Drupal error log:

OSTicket Instance:

ramrajone

souvikint2021
Have tried clearing the cache or using a different browser?

ramrajone

souvikint2021
Maybe Resource Scope issue, we use MS365, this is what I have:
https://graph.microsoft.com/v1.0/me
https://graph.microsoft.com/.default

or User Attributes Mapping:

souvikint2021

ramrajone Yes I have cleared both browser & drupal cache. The same is happening on firefox also.

souvikint2021

ramrajone I am using miniorange oauth server module to get client IDP from Drupal. I have already consulted with the MO team & they are saying that from drupal there is no issues, and they are suggesting to consult with OSTicket team to check if anything has been chnaged from OST end.

KevinTheJedi

souvikint2021

Have you tried a different browser like ramrajone suggested? Have you tried double checking the attributes? What about the scopes? What is the User's Authentication Backend set to? You can look at this in the user_account table in the database.

Cheers.

KevinTheJedi

souvikint2021

Is the secret expired?

Cheers.

souvikint2021

KevinTheJedi No, the secret is not expired. To make it clear, I re-generated the client id & client secret from drupal & pasted in the OST plugin. Still the issue is not solved.

KevinTheJedi

ramrajone

Unfortunately, they use Drupal so your defaults, scopes, endpoints, etc. won't be the same as theirs.

Cheers.

souvikint2021

KevinTheJedi
I have checked in firefox & chrome browser both. But same happens in both browsers.

Can I send you an email with a meeting link to discuss it in a better way?

KevinTheJedi

souvikint2021

Since I’m a core developer I am unable to do so without a support contract. I can only provide my assistance [for free] within the boundaries of this Forum.

After reviewing the mini orange documentation they should have an Attribute/Role Mapping section somewhere where you can check what attributes to use (or add your own if some aren’t enabled by default). Also, their endpoints look different than yours but I’m assuming it varies depending on the platform; it’s always good to double check though. Lastly, they don’t seem to specify what Scopes to use anywhere online so you may need to ask them what proper scopes to use are. Microsoft for example is https://graph.microsoft.com/.default, Google is profile https://www.googleapis.com/auth/userinfo.email, and Okta is openid profile email if that helps track it down.

Cheers.

souvikint2021

KevinTheJedi
Previously I had created an instance and for some reasons I had to delete the instance & recreate it. When I checked the user_accounts table, I found that in the "backend" column it was still using previous instance. So I truncated the table and tried to log in. Now the login is working properly. Thank you so much for your precious time.