# Oauth2 plugin: avatar not used

**URL:** https://meta.discourse.org/t/oauth2-plugin-avatar-not-used/295121
**Category:** SSO
**Tags:** oauth2
**Created:** [February 12, 2024, 8:39pm UTC](https://meta.discourse.org/t/oauth2-plugin-avatar-not-used/295121 "2024-02-12T20:39:40Z")
**Posts on this page:** 1
**Showing post:** 3

<div class="post-metadata">

### Author: ![jmlord](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jmlord/32/354569_2.png) [@jmlord](https://meta.discourse.org/u/jmlord)
#### Post date: [February 13, 2024, 2:15pm UTC](https://meta.discourse.org/t/oauth2-plugin-avatar-not-used/295121/3 "2024-02-13T14:15:17Z")

</div>

Hi Lillian, thanks for helping.

The quoted post seems to be in the case where the endpoint was not a direct link to the file. It’s a bit different here, where we directly provide the file link.

Also, this seems to work in some cases:

> [@Discourse OAuth2 Basic](https://meta.discourse.org/t/discourse-oauth2-basic/33879/306):
>
> It seems like the plugin only updates the avatar/username on initial creation of the user, not on everytime they log in. Is there anyway to fix this and have the plugin update the avatar as well on login/reconnection?

Also, tooltip of `oauth2 callback user info paths` property says

> Paths in the token response to other user properties. Supported properties are name, username, email, email\_verified and avatar. Format is property:path, eg: name:params.info.name

If not by URL, how do we do it? Should I base64encode it in the file?

Edit: Let me try the 2-step process, where the image avatar result is in another query, instead of the token response, and I’ll post again.

---

_[View the full topic](https://meta.discourse.org/t/oauth2-plugin-avatar-not-used/295121)._