# \#oauth2 **URL:** https://meta.discourse.org/tag/oauth2/233.md [Latest](https://meta.discourse.org/latest.md) · [Categories](https://meta.discourse.org/categories.md) · [Tags](https://meta.discourse.org/tags.md) --- ## [Discourse as Identity Provider on Authentik](https://meta.discourse.org/t/discourse-as-identity-provider-on-authentik/409259)
**Author:** [@satonotdead](https://meta.discourse.org/u/satonotdead)\ **Replies:** 0\ **Last updated:** [August 4, 2026, 2:06pm UTC](https://meta.discourse.org/t/discourse-as-identity-provider-on-authentik/409259 "2026-08-04T14:06:56Z")
Coming from Use Discourse as an identity provider (SSO, DiscourseConnect) I wonder if the official discourse-auth-proxy is enough for using the Discourse users database as provider for Authentik self-hosted instance, … --- ## [External Login function throwing error](https://meta.discourse.org/t/external-login-function-throwing-error/408579)
**Author:** [@vtan303](https://meta.discourse.org/u/vtan303)\ **Replies:** 1\ **Last updated:** [July 27, 2026, 12:50pm UTC](https://meta.discourse.org/t/external-login-function-throwing-error/408579 "2026-07-27T12:50:31Z")
Hi, wondering if anyone else is encountering this error where clicking on 3rd party login options (google/discord), will get this \`\`Uncaught TypeError: this.login.externalLogin is not a function\`\`\`? I am currently on ver… --- ## [Discourse OAuth2 Basic](https://meta.discourse.org/t/discourse-oauth2-basic/33879)
**Author:** [@Discourse](https://meta.discourse.org/u/Discourse)\ **Replies:** 30\ **Last updated:** [July 24, 2025, 12:05pm UTC](https://meta.discourse.org/t/discourse-oauth2-basic/33879 "2025-07-24T12:05:06Z")
:discourse2: Summary Discourse OAuth2 Basic supports basic OAuth2 providers, assuming they have a JSON API endpoint where user details can be retrieved by token. :open\_book: Install Guide This plugin is b… --- ## [Oauth2 with GitHub howto](https://meta.discourse.org/t/oauth2-with-github-howto/358125)
**Author:** [@rommelfs](https://meta.discourse.org/u/rommelfs)\ **Replies:** 1\ **Last updated:** [April 27, 2026, 12:32pm UTC](https://meta.discourse.org/t/oauth2-with-github-howto/358125 "2026-04-27T12:32:20Z")
For all those people having issues to get oauth2 to work with GitHub, here’s a solution. Problem: Discourse oauth2 plugin generates a 500 error when enabled with Github and the fields in configuration are not correctly … --- ## [SSO Provider URL contains symbol # cause issue](https://meta.discourse.org/t/sso-provider-url-contains-symbol-cause-issue/400782)
**Author:** [@vijayan\_mmm](https://meta.discourse.org/u/vijayan_mmm)\ **Replies:** 1\ **Last updated:** [April 20, 2026, 5:17am UTC](https://meta.discourse.org/t/sso-provider-url-contains-symbol-cause-issue/400782 "2026-04-20T05:17:22Z")
i have configured oauth2 for my provider, which has https://companyprovider/portal/#/login?client\_id=8ascxc but oauth-basic plugin considering # as delimitator and split the url without /#/login when redirecting for SSO… --- ## [New users clicking category link see “access to this forum is by invite only” and cannot log in via OAuth2](https://meta.discourse.org/t/new-users-clicking-category-link-see-access-to-this-forum-is-by-invite-only-and-cannot-log-in-via-oauth2/389937)
**Author:** [@Soumya\_Ranjan\_Mishra](https://meta.discourse.org/u/Soumya_Ranjan_Mishra)\ **Replies:** 4\ **Last updated:** [February 5, 2026, 5:38pm UTC](https://meta.discourse.org/t/new-users-clicking-category-link-see-access-to-this-forum-is-by-invite-only-and-cannot-log-in-via-oauth2/389937 "2026-02-05T17:38:34Z")
Hi Everyone, We have a private category in our Discourse instance that is restricted to a specific user group. We created a link so new users can access this category after logging in through OAuth2. However, when new … --- ## [OAuth2 and Letsencrypt clash](https://meta.discourse.org/t/oauth2-and-letsencrypt-clash/394536)
**Author:** [@Ostap1974](https://meta.discourse.org/u/Ostap1974)\ **Replies:** 8\ **Last updated:** [January 28, 2026, 4:44pm UTC](https://meta.discourse.org/t/oauth2-and-letsencrypt-clash/394536 "2026-01-28T16:44:34Z")
I have a Discourse Docker container running on Ubuntu (created from DO template) with “Custom OAuth2” enabled. Works very well, expect it fails to update its Letsencrypt certificate. Tracking down the problem I can see … --- ## [Settings for oauth2, IP rejected, how to solve](https://meta.discourse.org/t/oauth2-ip/394318)
**Author:** [@青岛王斌](https://meta.discourse.org/u/%E9%9D%92%E5%B2%9B%E7%8E%8B%E6%96%8C)\ **Replies:** 1\ **Last updated:** [January 26, 2026, 10:44am UTC](https://meta.discourse.org/t/oauth2-ip/394318 "2026-01-26T10:44:36Z")
\[root@HDDXVZ4023 discourse\_docker\]# tail -f /var/discourse/shared/standalone/log/rails/production.log Body: client\_id: client\_secret: grant\_type: authorization\_code code: zeyHxfhcvSIzMiw :redirect\_uri: https://\*\*\*\*\*… --- ## [Automatically assign users to groups](https://meta.discourse.org/t/automatically-assign-users-to-groups/394076)
**Author:** [@manut](https://meta.discourse.org/u/manut)\ **Replies:** 2\ **Last updated:** [January 22, 2026, 10:20am UTC](https://meta.discourse.org/t/automatically-assign-users-to-groups/394076 "2026-01-22T10:20:32Z")
Hi ! We might be interested into contributing to the OAuth2 Basic plugin to assign users to Discourse groups on account creation and/or login. For now, I found this post with some initial work by @mattdm, so we can sta… --- ## [500 error after getting the token in oauth2-basic plugin](https://meta.discourse.org/t/500-error-after-getting-the-token-in-oauth2-basic-plugin/392974)
**Author:** [@tejasj654](https://meta.discourse.org/u/tejasj654)\ **Replies:** 1\ **Last updated:** [January 8, 2026, 2:40pm UTC](https://meta.discourse.org/t/500-error-after-getting-the-token-in-oauth2-basic-plugin/392974 "2026-01-08T14:40:32Z")
I am facing a weird error that others seem to have solved. Basically, I am getting the token from the API but no user details API calls are being made. Instead, the callback URL fails with 500 without any error message. … --- ## [Configure sign up and log in with Auth0 using the OAuth2 Basic Plugin](https://meta.discourse.org/t/configure-sign-up-and-log-in-with-auth0-using-the-oauth2-basic-plugin/64633)
**Author:** [@Discourse](https://meta.discourse.org/u/Discourse)\ **Replies:** 73\ **Last updated:** [December 16, 2025, 9:31am UTC](https://meta.discourse.org/t/configure-sign-up-and-log-in-with-auth0-using-the-oauth2-basic-plugin/64633 "2025-12-16T09:31:17Z")
If you are using Auth0 as your identity provider this guide will show you how to setup authentication using the Discourse OAuth2 Basic Plugin. Initial Steps Create an Auth0 account if you don’t already have one The Di… --- ## [Social Login only works on desktop, but not on mobile devices (CSRF detected)](https://meta.discourse.org/t/social-login-funktioniert-nur-auf-desktop-aber-nicht-auf-mobilen-geraten-csrf-detected/389975)
**Author:** [@DW\_dev](https://meta.discourse.org/u/DW_dev)\ **Replies:** 3\ **Last updated:** [November 30, 2025, 7:13pm UTC](https://meta.discourse.org/t/social-login-funktioniert-nur-auf-desktop-aber-nicht-auf-mobilen-geraten-csrf-detected/389975 "2025-11-30T19:13:29Z")
Hello, My Discourse forum has a problem with social logins (Google, Discord, LinkedIn): On desktop, all social logins work perfectly. On all mobile devices (iOS/Android, Safari/Chrome/Firefox) it s... --- ## [Invite only forum with Google, OIDC or Oauth2 login](https://meta.discourse.org/t/invite-only-forum-with-google-oidc-or-oauth2-login/387802)
**Author:** [@phil22](https://meta.discourse.org/u/phil22)\ **Replies:** 2\ **Last updated:** [November 12, 2025, 10:43am UTC](https://meta.discourse.org/t/invite-only-forum-with-google-oidc-or-oauth2-login/387802 "2025-11-12T10:43:57Z")
Hello, I have a self hosted discourse instance. I have set up the OIDC connect plugin to sign in users with their google account. Using the settings in the google cloud console I’m able to limit this to users within my … --- ## [Invite Only and Auth skip create confirm settings show signup popup when using together](https://meta.discourse.org/t/invite-only-and-auth-skip-create-confirm-settings-show-signup-popup-when-using-together/380885)
**Author:** [@trobiyo](https://meta.discourse.org/u/trobiyo)\ **Replies:** 0\ **Last updated:** [August 29, 2025, 10:14am UTC](https://meta.discourse.org/t/invite-only-and-auth-skip-create-confirm-settings-show-signup-popup-when-using-together/380885 "2025-08-29T10:14:21Z")
Hello @team , I’ve stumble upon what we consider a small :bug: bug regarding OAuth and the use of the Invite Only and Auth skip create confirm settings together. Repro steps: Invite only : enabled. Login required: en… --- ## [Find all users who used "login with facebook"](https://meta.discourse.org/t/find-all-users-who-used-login-with-facebook/105313)
**Author:** [@darix](https://meta.discourse.org/u/darix)\ **Replies:** 5\ **Last updated:** [August 8, 2025, 9:37pm UTC](https://meta.discourse.org/t/find-all-users-who-used-login-with-facebook/105313 "2025-08-08T21:37:31Z")
for reasons we want to discontinue that and would like to know the impact it would have on our user base. is there an easy way to find that out? --- ## [Introduction to development for notification mail sending with Gmail](https://meta.discourse.org/t/introduction-to-development-for-notification-mail-sending-with-gmail/376772)
**Author:** [@Abris](https://meta.discourse.org/u/Abris)\ **Replies:** 9\ **Last updated:** [July 31, 2025, 8:29pm UTC](https://meta.discourse.org/t/introduction-to-development-for-notification-mail-sending-with-gmail/376772 "2025-07-31T20:29:02Z")
Hello, I’m new to Ruby and Docker, but having some development experience otherwise. I have a running dev Discourse instance as well a production instance, so dependencies seem to be met. I would like to add Oauth 2.0 f… --- ## [Discourse OAUTH Not Working!?](https://meta.discourse.org/t/discourse-oauth-not-working/375908)
**Author:** [@joshhabka](https://meta.discourse.org/u/joshhabka)\ **Replies:** 1\ **Last updated:** [July 26, 2025, 11:16pm UTC](https://meta.discourse.org/t/discourse-oauth-not-working/375908 "2025-07-26T23:16:29Z")
The Github oath is also not working. Am I doing something wrong? It shows Be careful! The \`redirect\_uri\` is not associated with this application. The application might be misconfigured or could be trying to redirect … --- ## [Sensitive information disclosure: OAuth2 client secret exposed in admin settings (not masked)](https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365)
**Author:** [@Evie\_Tao](https://meta.discourse.org/u/Evie_Tao)\ **Replies:** 2\ **Last updated:** [July 8, 2025, 1:40pm UTC](https://meta.discourse.org/t/sensitive-information-disclosure-oauth2-client-secret-exposed-in-admin-settings-not-masked/373365 "2025-07-08T13:40:30Z")
Issue Description During a security review of our customized Discourse deployment, we found a potential sensitive information disclosure in the Admin \> Settings interface regarding OAuth2 client secrets. Details In th… --- ## [OAuth2::ConnectionError, Failed to open TCP connection to discord.com:443 (execution expired)](https://meta.discourse.org/t/oauth2-connectionerror-failed-to-open-tcp-connection-to-discord-com-443-execution-expired/370772)
**Author:** [@zoeyme](https://meta.discourse.org/u/zoeyme)\ **Replies:** 0\ **Last updated:** [June 19, 2025, 12:15am UTC](https://meta.discourse.org/t/oauth2-connectionerror-failed-to-open-tcp-connection-to-discord-com-443-execution-expired/370772 "2025-06-19T00:15:26Z")
I’ve been trying to solve this issue for days and not getting anywhere. I have discord oauth set up, when you click authorize in the discord oauth prompt, instead of being directed to the homepage, you’re redirected to a… --- ## [OAuth2 Authentication Failure: CSRF Detected Error](https://meta.discourse.org/t/oauth2-authentication-failure-csrf-detected-error/363932)
**Author:** [@Evie\_Tao](https://meta.discourse.org/u/Evie_Tao)\ **Replies:** 0\ **Last updated:** [April 29, 2025, 8:02am UTC](https://meta.discourse.org/t/oauth2-authentication-failure-csrf-detected-error/363932 "2025-04-29T08:02:04Z")
Hi, I’m experiencing an issue logging into my Discourse instance using OAuth2 authentication. Users attempting to log in are shown the following error message: It appears to be related to a CSRF token validation fai… --- ## [Google OAuth](https://meta.discourse.org/t/google-oauth/363547)
**Author:** [@Chris\_C2000](https://meta.discourse.org/u/Chris_C2000)\ **Replies:** 0\ **Last updated:** [April 26, 2025, 9:15am UTC](https://meta.discourse.org/t/google-oauth/363547 "2025-04-26T09:15:31Z")
I’ve setup the Google Auth as per the guide but whenever I click onthe google button at login or sign up it comes up with : Sorry, there was an error authorizing your account. Please try again. In the verbose logs on t… --- ## [Discord, Google and Microsoft login, is oAuth2 enough?](https://meta.discourse.org/t/discord-google-and-microsoft-login-is-oauth2-enough/359144)
**Author:** [@Olle11](https://meta.discourse.org/u/Olle11)\ **Replies:** 14\ **Last updated:** [March 29, 2025, 7:57am UTC](https://meta.discourse.org/t/discord-google-and-microsoft-login-is-oauth2-enough/359144 "2025-03-29T07:57:18Z")
Hi everybody, I want to insert a Discord, Google and Microsoft login to my forum and I wonder if oAuth2 is enough to insert this? Plugin for Google login: Plugin for Microsoft login: Plugin for Discord login: I s… --- ## [Allow oauth2 to ignore username/email taken](https://meta.discourse.org/t/allow-oauth2-to-ignore-username-email-taken/348845)
**Author:** [@AEW745](https://meta.discourse.org/u/AEW745)\ **Replies:** 0\ **Last updated:** [January 24, 2025, 4:31pm UTC](https://meta.discourse.org/t/allow-oauth2-to-ignore-username-email-taken/348845 "2025-01-24T16:31:29Z")
Currently when signing in with multiple Oauth2 providers that contains the same email or username prevents you from logging in due to username or email taken. Since, usernames don’t have case insensitivity if one or more… --- ## [OAUTH flow to Integrate the discourse community account with the third party CRM tool where it can create tickets of community](https://meta.discourse.org/t/oauth-flow-to-integrate-the-discourse-community-account-with-the-third-party-crm-tool-where-it-can-create-tickets-of-community/343092)
**Author:** [@kekafel](https://meta.discourse.org/u/kekafel)\ **Replies:** 2\ **Last updated:** [December 18, 2024, 6:45am UTC](https://meta.discourse.org/t/oauth-flow-to-integrate-the-discourse-community-account-with-the-third-party-crm-tool-where-it-can-create-tickets-of-community/343092 "2024-12-18T06:45:01Z")
I want to integrate discourse Account with the CRM tool that I have where what I want is as follows :- User can add their Discourse community account in my tool using his discourse loginId and password . Discourse sh… --- ## [OAuth Error - Unable to know exact cause for this error](https://meta.discourse.org/t/oauth-error-unable-to-know-exact-cause-for-this-error/342789)
**Author:** [@Steve\_John](https://meta.discourse.org/u/Steve_John)\ **Replies:** 6\ **Last updated:** [December 17, 2024, 7:19am UTC](https://meta.discourse.org/t/oauth-error-unable-to-know-exact-cause-for-this-error/342789 "2024-12-17T07:19:03Z")
We get this this OAuth error and refreshing the page it works…I did check the error log and here is the details::: Faraday::TimeoutError (Timeout::Error) I get this below traceback log error: activesupport-7.2.2/… --- ## [Faraday::SSLError (SSL\_read: unexpected eof while reading)](https://meta.discourse.org/t/faraday-sslerror-ssl-read-unexpected-eof-while-reading/341145)
**Author:** [@Jagster](https://meta.discourse.org/u/Jagster)\ **Replies:** 1\ **Last updated:** [December 8, 2024, 4:25pm UTC](https://meta.discourse.org/t/faraday-sslerror-ssl-read-unexpected-eof-while-reading/341145 "2024-12-08T16:25:34Z")
I’m trying to get OAuth2 work between forum and Wordpress. But now when logged in to Wordpress and returning back to https://forum/auth/oauth2\_basic/callback I get Oops and logs tell Faraday::SSLError (SSL\_read: unexpect… --- ## [Sorry, there was an error authorizing your account](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229)
**Author:** [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)\ **Replies:** 22\ **Last updated:** [December 6, 2024, 9:46am UTC](https://meta.discourse.org/t/sorry-there-was-an-error-authorizing-your-account/112229 "2024-12-06T09:46:27Z")
Hi there, I´m working for a big company and I´m using an internal oauth2 provider in conjunction with this plugin. In a different business unit there is already another discourse instance running, where the same setup w… --- ## [OAUTH2 basic - a nightmare :-(](https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662)
**Author:** [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)\ **Replies:** 20\ **Last updated:** [December 3, 2024, 2:48pm UTC](https://meta.discourse.org/t/oauth2-basic-a-nightmare/338662 "2024-12-03T14:48:47Z")
Hey guys, I´m trying to setup OAUTH2 since 2 days, and have problems. I configured everything according to the documentation, but I´m getting this all the time (oauth2\_basic) Authentication failure! invalid\_scope: Omn… --- ## [Issue: CSRF Detected Error with OAuth2 Login using oauth2-basic Plugin](https://meta.discourse.org/t/issue-csrf-detected-error-with-oauth2-login-using-oauth2-basic-plugin/331505)
**Author:** [@Ly\_Chen](https://meta.discourse.org/u/Ly_Chen)\ **Replies:** 1\ **Last updated:** [October 18, 2024, 8:51pm UTC](https://meta.discourse.org/t/issue-csrf-detected-error-with-oauth2-login-using-oauth2-basic-plugin/331505 "2024-10-18T20:51:45Z")
Hi, I encountered a “csrf\_detected” error while using the oauth2-basic plugin to log in via OAuth2. Below is the detailed flow of the issue: I click “Login,” which redirects me to: https://myforum/auth/basic\_oauth2 I… --- ## [Auto Login to my Discourse site / subdomain](https://meta.discourse.org/t/auto-login-to-my-discourse-site-subdomain/313243)
**Author:** [@PlanPros](https://meta.discourse.org/u/PlanPros)\ **Replies:** 1\ **Last updated:** [June 23, 2024, 5:39pm UTC](https://meta.discourse.org/t/auto-login-to-my-discourse-site-subdomain/313243 "2024-06-23T17:39:15Z")
I intend to use discourse - either self-hosted on DigitalOcean or via the Standard plan on discourse.org. But I already have a vanilla login system in place on my website, and if I have my discourse at, say, community.m… [Next page](https://meta.discourse.org/tag/oauth2/233.md?match_all_tags=true&page=1&tags%5B%5D=oauth2)