question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Invalid Github Auth scope

See original GitHub issue

The github auth url is https://github.com/login?client_id=2b2a9dcc53df88ddf452&return_to=/login/oauth/authorize?client_id=2b2a9dcc53df88ddf452&redirect_uri=http://www.freecodecamp.com/auth/github/callback&response_type=code&scope=email

Here, scope=email parameter is not a valid scope according to https://developer.github.com/v3/oauth/#scopes

If it is meant to retrieve only the public data of a user, scope is not required to be given. Or if it is meant to retrieve both public data and private email id, then scope should be set to user:email.

Currently, using an invalid scope, only public data is retrieved but not the private email id (if this was not intentional). https://github.com/FreeCodeCamp/FreeCodeCamp/blob/staging/server/passport-providers.js#L147 https://github.com/FreeCodeCamp/FreeCodeCamp/blob/staging/server/passport-providers.js#L161

This was added in commit https://github.com/FreeCodeCamp/FreeCodeCamp/commit/2256f3ef6e2cfec7dd82b975ca5795ba792d2401

Issue Analytics

  • State:closed
  • Created 7 years ago
  • Comments:6 (6 by maintainers)

github_iconTop GitHub Comments

3reactions
raisedadeadcommented, Nov 30, 2016

I am sure he meant you @abhisekp ! 😅

2reactions
QuincyLarsoncommented, Nov 30, 2016

@BerkeleyTrue OK - great. Thank you for confirming this. @abhisekp since you discovered this issue, would you like to be the contributor to create the pull request?

Read more comments on GitHub >

github_iconTop Results From Across the Web

Scopes for OAuth Apps - GitHub Docs
Scopes let you specify exactly what type of access you need. Scopes limit access for OAuth tokens. They do not grant any additional...
Read more >
Authorization Error - Invalid Scope; likely due to provisioning ...
When trying to explore the Cloud Search API v1 API, I am seeing Authorization Errors due to invalid_scope on pretty much all the...
Read more >
The requested scope is invalid · Issue #12 - GitHub
Hi there, I get this error when I cloned and changed the info with my ClientId/Secret Key etc. ... If I try only...
Read more >
Invalid Scopes with keycloak provider · Issue #1448 - GitHub
I get an error (firefox) "The page isn't redirecting properly", and it suggests I disable cookies. Logs from the oauth sidecar container. [2021/ ......
Read more >
Troubleshooting OAuth App access token request errors
Help us make these docs great! All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request. Make...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found