Another Oath2 issue (Connection refused for URL/...)

rexray

Hello guys,

Following Kevin directions I'm creating a new thread:

https://forum.osticket.com/d/105728-ms-oauth2-error-the-api-version-v2-has-been-depreciated/292

I used Osticket for a while until I got the "The API version 'V2' has been depreciated" so I decided to installed v1.18.1 from scratch... I went with that version because it looks like the only difference between that and 1.17.5 was the PHP version:

Here are my system info:

v1.18.1 (0375576)
Debian 11 bullseye
Apache2
10.5.18-MariaDB-0+deb11u1
URL Rewrite activated

I downloaded the Oauth2 Client from the plugin area of the ticketing system (admin pabel\manage\plugins) and it shows I'm running 0.6 version (no sure if Dev is changing the version number when updating and as far as I know v1.17.2 shows plugin also as 0.6 version)

I follow the "Microsoft Authorization Guide" and since there is no "Resource Details Endpoint" or "Email Address Attribute" on that tutirial, I used what I found in the different threads: "https:/graph.microsoft.com/v1.0/me" "https:/graph.microsoft.com/v2.0/me" "EmailAddress" and "mail" but none of those are working for me.

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

So here are my OAuth2 Authorization:

One thing that I noticed is that the API permissions on the the Azure portal doesn't match the one in the configuration' for example IMAP points to this:

Yes I tried all those but still have the "Connection refused for URI https:/graph.microsoft.com/v1.0/me"

Any help will be greatly appreciate.

Thanks in advace,

Rex.

KevinTheJedi

rexray

Because you're not supposed to use Graph Scopes; this is why following specific documentation is very important. Please read the documentation here:

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authorization%20Guide.html

You'll notice a fat Attention warning at the top that explains there were recent deprecations from Microsoft and that you need to update the Scopes. If all else fails you can try going through the documentation again, creating a new app registration following said documentation, and updating your email settings in osTicket to reflect the new app settings.

Cheers.

rexray

Yes Sr,

I notided that so I used the ones from your post here:

https://forum.osticket.com/d/105871-new-build-of-oauth2-plugin-released

offline_access https://outlook.office.com/IMAP.AccessAsUser.All https://outlook.office.com/POP.AccessAsUser.All https://outlook.office.com/SMTP.Send

Still getting a "Connection refused" even with incognito page.

rexray

Forgot to said, I created new app on Azure but still the same.

KevinTheJedi

rexray

Then it appears you didn't install the latest build of the plugin as we no longer call the graph endpoint to get the "connection refused" error.

Cheers.

rexray

Thank you Kevin for the help so far.

How will I know if I have the last build? as I stated, I download the plugin via admin panel\manage\plugins which one may thinks is connecting to the latest repository.
https://docs.osticket.com/en/latest/Admin/Manage/Plugins.html

KevinTheJedi

rexray

Then maybe you installed in wrong location or the server is still loading the old version via cache, etc.? I would restart the webserver and PHP-FPM (if you're running it) and seeing if that helps. If not you may need to reach out to your server admin and/or hosting provider to see if they can clear the server's file cache.

The new build of the plugin will not call the graph user endpoint which is how you are getting the "connection refused" error.

Cheers.