Email config returns to public page

ealtman

Hello,

I starting getting the OAUTH2 error "The API version 'V2' has been depreciated." yesterday, so I upgraded from 1.17.4 to 1.17.5, and installed the new plugin.
Now when I try to set up the remote mailbox for my application service account with Microsoft OAUTH2, instead of giving me an error, it's kicking me out on the public page (https://mywebsite.edu/osticket)
Any idea how I can get it to give me an error in the console instead?
-Elizabeth

KevinTheJedi

ealtman

You'd have to unpack the plugin and add debug statements here:

https://github.com/osTicket/osTicket-plugins/blob/develop/auth-oauth2/auth.php#L26

However, from experience this simply means something is misconfigured within the plugin/app registration or the client secret is expired. I would recommend reviewing your information and comparing it with your app registration and our documentation. There are new Scopes you need to use so be sure to update those as well.

Cheers.

ealtman

Can you clarify what you mean by "debug statements" and what to add? I'm getting a strange redirect. In the past if there was a problem, it would take me back to the email Remote Mailbox page and spit out an error in red text.

-Elizabeth

KevinTheJedi

ealtman

You really shouldn’t have to add debug statements at all if you follow my suggestions above. You should only need to unpack the plugin and debug if something was seriously wrong and not something we’ve seen before. I assure you your issue is SUPER common and will likely addressed by reviewing and double checking your information or maybe even generating a new client secret as it’s possibly expired. Worst case scenario you would need to generate a new app registration and update the information in the email.

Cheers.

ealtman

That worked - I think? There were other issues - the Authorization Endpoint and the Token Endpoint were autopopulating with URIs that didn't contain the client ID -
https://login.microsoftonline.com/common/oauth2/v2.0/authorize
instead of
https://login.microsoftonline.com/[client ID hash]/oauth2/v2.0/token

I added the correct ones. Also had to make sure the scope contained

https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send

which was a switch from what I had been doing.

Thanks!