# OAUTH2 basic - a nightmare :-(

**URL:** <https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662>\
**Category:** SSO\
**Tags:** oauth2\
**Created:** [November 27, 2024, 5:41am UTC](https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662 "2024-11-27T05:41:00Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![Wurzelseppi](https://avatars.discourse-cdn.com/v4/letter/w/eada6e/32.png) [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)\
**Post date:** [November 27, 2024, 5:41am UTC](https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662/1 "2024-11-27T05:41:00Z")

</div>

Hey guys,

I´m trying to setup OAUTH2 since 2 days, and have problems.

I configured everything according to the [documentation](https://meta.discourse.org/t/configure-sign-up-and-log-in-with-auth0-using-the-oauth2-basic-plugin/64633), but I´m getting this all the time

```plaintext
(oauth2_basic) Authentication failure! invalid_scope: OmniAuth::Strategies::OAuth2::CallbackError, invalid_scope | Unknown/invalid scope(s)
Started GET "/auth/failure?message=invalid_scope&origin=<censored>%2Flatest&strategy=oauth2_basic" for 10.153.107.106 at 2024-11-27 05:30:33 +0000
Processing by Users::OmniauthCallbacksController#failure as HTML
  Parameters: {"message"=>"invalid_scope", "origin"=>"<censored>/latest", "strategy"=>"oauth2_basic"}

```

My config in the board (regarding scopes) is thus:

 ![The image shows a screenshot of an authorization options page with a request for authorization for email and profile. (Captioned by AI)](https://global.discourse-cdn.com/meta/original/4X/0/5/d/05de3f1379a07c8788c87e496d90110cd1308faf.png)

The IdP is configured like this:

 ![image](https://global.discourse-cdn.com/meta/original/4X/b/7/3/b738c625a05e822b20ace9f0eed487b6c9877186.png)

Anyone have a hint, how to debug this a bit further:

Cool curls, with which I cound test, or better debug output (already turned on the rich debugging option) ?

Getting nuts about this ☹

Thanks and cheers!

WS

UPDATE:

Just set the options back to just “scope”

 ![The image depicts a screenshot of an online form with a text box prompting the user to "scope" and a text box below it for "When authorizing request these options". (Captioned by AI)](https://global.discourse-cdn.com/meta/original/4X/3/b/2/3b2b459f96f3f36e167186f6dacda684ef54ee50.png)

but wasn´t working ☹

---

_[View the full topic](https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662)._