# Sorry, there was an error authorizing your account
**URL:** https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229
**Category:** SSO
**Tags:** oauth2
**Created:** [March 21, 2019, 8:51am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229 "2019-03-21T08:51:24Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 8:51am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/1 "2019-03-21T08:51:24Z")
Hi there,
I´m working for a big company and I´m using an internal oauth2 provider in conjunction with this plugin. In a different business unit there is already another discourse instance running, where the same setup works. I analyzed their instance, and found almost nothing except a version difference of the plugin and of discourse itself.
But first of all I´ll tell you what happens.
I set up the plugin and configured everything according to documentation (the same as the other instance plus some settings, which aren´t available in the old version (0.2) of the plugin which they are using.
No I see the extra button in login screen and get forwarded to a login page (company) where I can type in my SSO account & pw…
After pressing enter this screen appears:
The logs show this:
```
(oauth2_basic) Authentication failure! invalid_credentials: OAuth2::Error, invalid_client: Invalid authentication method for accessing this endpoint.
{"error_description":"Invalid authentication method for accessing this endpoint.","error":"invalid_client"}
```
I double checked the credentials and talked with the guys of web-eam support, and they said the authorization phase was succcessful (I got valid return parameters (code, iss, state) with the callback call)
Anyone knows how to approach this problem ?
My versions are:
Discourse: v2.3.0.beta5 +5
oauth-basic plugin: 0.3
Many thanks in advance and greetings,
Wurzelseppi
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 21, 2019, 10:37am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/2 "2019-03-21T10:37:47Z")
Do you have verbose SSO logging mode enabled in your site settings when testing?
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 10:39am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/3 "2019-03-21T10:39:01Z")
Hi,
sure I have 🙂
Do I get the verbose logs then also over the log-viewer, or do I have to dig deeper in my container ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2019, 10:43am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/4 "2019-03-21T10:43:32Z")
See
```
/var/discourse/shared/standalone/logs/rails
```
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 10:55am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/5 "2019-03-21T10:55:42Z")
It says there
```
(oauth2_basic) Setup endpoint detected, running now.
(oauth2_basic) Callback phase initiated.
(oauth2_basic) Authentication failure! invalid_credentials: OAuth2::Error, invalid_client: Invalid authentication method for accessing this endpoint.
{"error_description":"Invalid authentication method for accessing this endpoint.","error":"invalid_client"}
Started GET "/auth/failure?message=invalid_credentials&origin=https%3A%2F%2F[community-address]%2F&strategy=oauth2_basic" for 127.0.0.1 at 2019-03-21 10:50:43 +0000
Processing by Users::OmniauthCallbacksController#failure as HTML
Parameters: {"message"=>"invalid_credentials", "origin"=>"https://[community-address]/", "strategy"=>"oauth2_basic"}
```
The support guys told me, that the invalid client message doesn´t come from their end…
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2019, 11:43am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/6 "2019-03-21T11:43:29Z")
I don’t know if it’s related, but the ip address is localhost, which suggests that you need to modify your setup to get the correct remote ip number reported to discourse.
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 11:45am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/7 "2019-03-21T11:45:01Z")
Hi,
hmmm..do you have any clue where i could do that ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2019, 11:46am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/8 "2019-03-21T11:46:52Z")
[Serve Discourse from a subfolder (path prefix) instead of a subdomain](https://meta.discourse.org/t/subfolder-support-with-docker/30507) has an example.
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 12:35pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/9 "2019-03-21T12:35:20Z")
Probably I´m to dense to understand it 😃 , but I found nothing in that link you mentioned which is related to this
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2019, 1:23pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/10 "2019-03-21T13:23:03Z")
Maybe [How to set set\_real\_ip\_from for discourse - #9 by parisa](https://meta.discourse.org/t/how-to-set-set-real-ip-from-for-discourse/74416/9) will be more helpful.
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 2:00pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/11 "2019-03-21T14:00:32Z")
Hi,
is it possible to roll back to previous version ?
A neighbouring instance is using 0.2, and I 0.3 … mine doesn´t work, theirs do …
Just want to make sure it hass nothing to do with the new version.
Thanks guys!
---
### Author:  [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [March 21, 2019, 2:22pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/12 "2019-03-21T14:22:31Z")
Unless neither of you is on tests-passed then more than a plugin version will differ.
What’s the specific issue which leads you to think you need to downgrade? Different version numbers aren’t necessarily the problem.
If it’s the issue described [here](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229) then please don’t create duplicates. Work through the problem as it is until you’ve been able to identify a root cause. You were asked certain questions in that topic which you haven’t responded to.
It’s possible that there is an issue with the plugin, only by working through the problem to identify the cause can we raise bugs with plugin developers and resolve it for everyone.
Remember, correlation and causation aren’t the same thing.
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 21, 2019, 2:28pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/13 "2019-03-21T14:28:50Z")
Hi,
thanks @Stephen. That´s exactly the problem i have, but the question for roll-back was a general one. The problem is, that I tried everything here
> [@Sorry, there was an error authorizing your account](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229):
>
> Hi there, I´m working for a big company and I´m using an internal oauth2 provider in conjunction with this plugin. In a different business unit there is already another discourse instance running, where the same setup works. I analyzed their instance, and found almost nothing except a version difference of the plugin and of discourse itself. But first of all I´ll tell you what happens. I set up the plugin and configured everything according to documentation (the same as the other instance plu…
but wasn´t able to solve it…
One of the most obvious differences between mine and the other instance (which is working) I see is the version of the plugin.
But I´ll continue the search in the other thread.
Thanks alot and greetings,
Wurzelseppi
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2019, 10:01pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/14 "2019-03-21T22:01:28Z")
No, you can’t roll back. Since I think it’s a new site, you could [back up the settings](https://meta.discourse.org/t/how-can-i-import-export-settings-into-a-file/51496/4) and pin the plugin and Discourse to a particular commit by editing the yml file. There is a commented out `version` line that you can replace by a version or a commit. You can similarly modify things to get a particular version of a plugin, but you’ll have to search about for how to do that.
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 22, 2019, 10:10am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/15 "2019-03-22T10:10:09Z")
I implemented the template which was suggested in your link, but it wasn´t successful. Logs still are
```
Started GET "/auth/oauth2_basic" for 127.0.0.1 at 2019-03-22 10:03:16 +0000
(oauth2_basic) Setup endpoint detected, running now.
(oauth2_basic) Request phase initiated.
Started GET "/auth/oauth2_basic/callback?code=TUurdGXN4BgO_KZunK3Zb3SBYsU&iss=https%3A%2F%2Fauth-i.xxx.net%3A443%2Fauth%2Foauth2%2Frealms%2Froot%2Frealms%2Fintranetb2x&state=d1fd00e28e0aaf44921d7351b61fdd1d7ee09de8fb02f68d&client_id=fsg8gd5v1i12ncyvkj1f28pzi68prkijks8r" for 127.0.0.1 at 2019-03-22 10:03:26 +0000
(oauth2_basic) Setup endpoint detected, running now.
(oauth2_basic) Callback phase initiated.
(oauth2_basic) Authentication failure! invalid_credentials: OAuth2::Error, invalid_client: Invalid authentication method for accessing this endpoint.
{"error_description":"Invalid authentication method for accessing this endpoint.","error":"invalid_client"}
Started GET "/auth/failure?message=invalid_credentials&origin=https%3A%2F%2Fcommunity-int.x.net%2F&strategy=oauth2_basic" for 127.0.0.1 at 2019-03-22 10:03:27 +0000
Processing by Users::OmniauthCallbacksController#failure as HTML
Parameters: {"message"=>"invalid_credentials", "origin"=>"https://community-int.xx.net/", "strategy"=>"oauth2_basic"}
Rendering users/omniauth_callbacks/failure.html.erb within layouts/no_ember
Rendered users/omniauth_callbacks/failure.html.erb within layouts/no_ember (0.9ms)
Rendered layouts/_head.html.erb (17.8ms)
Rendered common/_discourse_stylesheet.html.erb (5.5ms)
Rendered application/_header.html.erb (1.8ms)
Completed 200 OK in 50ms (Views: 25.5ms | ActiveRecord: 15.7ms)
```
I have to mention, that I´m hosting discourse in the official docker image. Maybe there is some issue with docker network ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 22, 2019, 10:32am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/16 "2019-03-22T10:32:25Z")
I do not know whether it will solve your problem, but it will solve others. This line is still reporting localhost as the ip:
> [@Wurzelseppi](#):
>
> Started GET “/auth/failure?message=invalid\_credentials&origin=https%3A%2F%[2Fcommunity-int.x.net](http://2Fcommunity-int.x.net)%2F&strategy=oauth2\_basic” for 127.0.0.1 at 2019-03-22 10:03:27 +0000
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [March 30, 2019, 7:58pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/17 "2019-03-30T19:58:03Z")
Hi guys,
just wanted to tell you, that I wasn´t able to solve this, yet ☹
I couldn´t dedicate to much time during the last week, but now I´ll try to pick up the thread again.
Now. I implemented the template which was suggested here
> [@Sorry, there was an error authorizing your account](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/10):
>
> Maybe [How to set set\_real\_ip\_from for discourse](https://meta.discourse.org/t/how-to-set-set-real-ip-from-for-discourse/74416/9) will be more helpful.
but without success. It still shows me the 127.0.0.1 local address here
> … [x.net](http://x.net)%2F&strategy=oauth2\_basic" for 127.0.0.1 at 2019-03-22 10:03:27
but honestly I don´t believe, that this is related to the original problem I have.
To understand this. The remote oauth web-ui was called after clicking the button in the “SignUp” Dialog…I logged in there and the service generated a code (not a token, because the request type is set to “code” in the plugin) and called the call back URL with extra stuff appended (like the code).
In my understanding the endpoint, which is being called give me this error now … invalid client. Right ?
The call which would now be made to get the user info never happens…
Or do I understand it wrongly ?
Many thanks guys for your time and for your help …
Greetings,
Wurzelseppi
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [April 4, 2019, 9:58am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/18 "2019-04-04T09:58:27Z")
Really nobody here who could help ?
---
### Author:  [@OvermindDL1](https://meta.discourse.org/u/OvermindDL1)
#### Post date: [April 8, 2019, 2:58pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/19 "2019-04-08T14:58:20Z")
> [@Wurzelseppi](#):
>
> but without success. It still shows me the 127.0.0.1 local address here
This still implies that there is an issue at least with this setup though?
So that begs the question, the oauth2 server, is it really at 127.0.0.1 or is it on another remote server? 🙂
---
### Author:  [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)
#### Post date: [April 8, 2019, 8:30pm UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229/20 "2019-04-08T20:30:39Z")
Guess that just means, that the call back request coming from the auth service got answered by nginx and forwarded locally from nginx over 127.0.0.1 to port 3000 (oauth plugin) …
But never mind, we found the bug at the auth provider. They configured a wrong auth method for us …
[Next page](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229.md?page=2)