V1.18 - OAuth2 Plugin - osTicket Forum

V1.18 - OAuth2 Plugin

rsclmumbai

I'm trying to setup Office 365 account in my OSTicket & I'm new OAuth.

From where should I get the information required for these 2 fields:
Client Id: *
Client Identifier (Id)
Client Secret: *
Client Secret

Other settings:

Please help.

Thanks

KevinTheJedi

rsclmumbai

The documentation is here:

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

Cheers.

rsclmumbai

KevinTheJedi
Thanks. I'm following the documentation guide and I'm stuck at 2 places.

My OST shows as below but there is no "auth" folder in my setup. See screenshot below
Redirect URI: * Callback Endpoint https://mydoman.com/OST-FM-2024/api/auth/oauth2

When returning back from azure portal, the link access was as below & it talks about "common endpoint is not supported for such applications created..."

https://mydoman.com/OST-FM-2024/api/auth/oauth2?error=invalid_request&error_description=AADSTS50194%3a+Application+%27878e75b2-a23d-4f90-96b4-7df2de597fe8%27(31West_OAuth)+is+not+configured+as+a+multi-tenant+application.+Usage+of+the+%2fcommon+endpoint+is+not+supported+for+such+applications+created+after+%2710%2f15%2f2018%27.+Use+a+tenant-specific+endpoint+or+configure+the+application+to+be+multi-tenant.+Trace+ID%3a+c499271d-a4f0-4058-b783-ed1c8bac0600+Correlation+ID%3a+c82a224a-f404-47cd-a912-1ee0a867fb19+Timestamp%3a+2024-11-20+14%3a29%3a31Z&state=eeda8d4ac885d8932dfc4ae336a4e019#

Please tell me how to proceed.

Thanks

rsclmumbai

KevinTheJedi
The plugin module of OST looks like this:

KevinTheJedi

rsclmumbai

Correct, there is no auth folder as the API routes the endpoint via api/.htaccess rules.

As for common endpoints you are not using the right endpoints. Please follow the documentation as it shows you where to get the endpoints from.

Cheers.

rsclmumbai

KevinTheJedi Thanks a ton for a quick reply.
Reworking on the steps.

Thanks

rsclmumbai

KevinTheJedi

I have confirmed that the endpoint URL's match. Let me know if we need to switch the application to multi-tenant or if anything else needs to be done.

The error message in the URL I shared in my previous reply shows an error message about multi-tenant.
https://mydoman.com/OST-FM-2024/api/auth/oauth2?error=invalid_request&error_description=AADSTS50194%3a+Application+%27878e75b2-a23d-4f90-96b4-7df2de597fe8%27(31West_OAuth)+is+not+configured+as+a+multi-tenant+application.+Usage+of+the+%2fcommon+endpoint+is+not+supported+for+such+applications+created+after+%2710%2f15%2f2018%27.+Use+a+tenant-specific+endpoint+or+configure+the+application+to+be+multi-tenant.+Trace+ID%3a+c499271d-a4f0-4058-b783-ed1c8bac0600+Correlation+ID%3a+c82a224a-f404-47cd-a912-1ee0a867fb19+Timestamp%3a+2024-11-20+14%3a29%3a31Z&state=eeda8d4ac885d8932dfc4ae336a4e019#
Extract from the URL:
is+not+configured+as+a+multi-tenant+application.+Usage+of+the+%2fcommon+endpoint+is+not+supported+for+such+applications+created+after+%2710%2f15%2f2018%27.+Use+a+tenant-specific+endpoint+or+configure+the+application+to+be+multi-tenant.

Another thing, when the above URL opening on my OST side, it gave a 404 error.

So now I have 2 questions

Do I need to switch the application to multi-tenant?
Is the 404 Error an expected behavior?

Thanks

KevinTheJedi

rsclmumbai

No, the app should be Single Tenant as shown in the documentation. Then you get the Authorization/Token Endpoints from the Endpoints button within the app registration in entra.

Cheers.

rsclmumbai

KevinTheJedi Thanks for the super prompt reply. Heading back to Azure to get this working.

rsclmumbai

KevinTheJedi
I did the whole process again & I'm getting the error - PAGE NOT FOUND ERROR:

Error logs say this:
49.36.113.22 - - [21/Nov/2024:04:19:30 +0000] "GET /OST-FM-2024/api/auth/oauth2?code=1.AVUABtTVRvG_w0-OuvVJJ3dYJ46VfC412HlAgft3CgkvUiqIAJJVAA.AgABBAIAAADW6jl31mB3T7ugrWTT8pFeAwDs_wUA9P8cOCdssVnqjsJimrCc_LdkRSL_i3QY9X3hjVvIuxt6NRcTg6z-n5SPadBWHBv0hEMFwyb5XX4gmvFWJaOKjPuJ2b2dEUFp3R-KjwMJe5FpiGbRb9WHarNIWDIQSFGeGsKnf993eNNMBIWh4UI6jaCEGzNtBb3ff62OuQVnIJQaNI2y3wx3Ccvkvnh4SagM0CbXAVitY1pS0kgwMt4Ijj3Z_WnkGIwAIyfvsZoM8lujOe9aMEregQeu47JTdVaFbirvm1ylLlxio4xk0xiC6gpUS213XsdSOKc2LS45dH0h-kf5ifKUNyISULD4sLjmnGeOD36Qqp7194cVGj8daiCZKc69MY9Fv7z2C3c-ZrI6Mh6PVQUEn9eDsgmAOyu-PetYyegxJc0LkpZhdgr8VuedLxJubsrL2sLKp3hmfhcNsOD2ER9rgRAS4rQxfFi-293uJWdg6EIzLoHVJT4G-vGlM8V06WGz2LoC_tmijYv_STXIHegfgGJYoG_LE8u-XYBDpbz5u3P_kiYKY2Au4G61DGwpDCWhVPaSgckN8YRsahedBjfY4pCrrVDyqcbQfdm8t3HGK-ZGsClJttmJRcUVrwAeEdh6a4GYhmjnXNqW9EDB9Ij91GzvRaGHS93sUR72_pKpAegnmxUyoN9kF0H9EfozVOZe5XwWCeU-5IqAeYfPzMZNssM_IK52APXUGqQYhu4nBPUwV_JU_D_WjtzQX9Ad1SN1P7gwyY4ISfFlfHpf3BSFqdSGcYECAAXOP7cSAUOit5nSYSyLHFbHw_szdbrrx9ziYjcwZ8_hCAp3EpNaroIMsdtDt9-VGJi81Hc11sLHtxjB0rkOQg&state=fb1699cb5745963ee2fe25ddb690fd8a&session_state=f755ab45-61ab-4847-999c-ac07a7e29d62 HTTP/1.1" 404 196 "https://login.microsoftonline.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"

KevinTheJedi

rsclmumbai

Then you do not have URL rewriting enabled on your web server. If using Apache you need to ensure the rewrite module is installed and enabled and the site config has AllowOverride All.

Cheers.