Please check your client id, scopes and redirect URIs.

[Brayan Rodriguez]

I am trying to authenticate a JupyterHub service with ORCiD. I am working on a test server (without HTTPS nor DNS). They request for the endpoint with user data and after looking for it too much time, I found this one: https://sandbox.orcid.org/oauth/userinfo. For this purpose, I created a Sandbox API Client and register this app: http://50.116.16.56:8000 with the following redirect_uri: http://50.116.16.56:8000/hub. 

However, when it redirects to https://sandbox.orcid.org/oauth/authorize?state=eyJzdGF0ZV9pZCI6ICJhYzVkMzJiNGEzZjU0ODJlOTBiMGQzYjJiNzkwNGFlYSIsICJuZXh0X3VybCI6ICIifQ%3D%3D&client_id=APP-M29Z8EEBM7HAB10J&response_type=code&redirect_uri=http%3A%2F%2F50.116.16.56%3A8000%2Fhub%2Foauth_callback, I get the following error: 

There has been a problem with the server. If this problem persists, please contact support.

And when I am not logged in sandbox.orcid.org, the following: 

Please check your client id, scopes and redirect URIs.

PD: When the service is running in production what is the userinfo endpoint URL?

Thank you in advance.

[Brayan Rodriguez]

My Jupyterhub config file is: 

from oauthenticator.generic import GenericOAuthenticator

c.JupyterHub.authenticator_class = GenericOAuthenticator

c.JupyterHub.authenticator_class.login_handler._OAUTH_AUTHORIZE_URL = "https://sandbox.orcid.org/oauth/authorize"

c.JupyterHub.authenticator_class.login_handler._OAUTH_TOKEN_URL = "https://sandbox.orcid.org/oauth/token"

c.OAuthenticator.client_id = 'APP-M29Z8EEBM7HAB10J' # oauth2 client id for your app

c.OAuthenticator.client_secret = '1e49a96d-7794-41b0-b02e-b30162fd76e0' # oauth2 client secret for your app

c.GenericOAuthenticator.token_url = 'https://sandbox.orcid.org/oauth/token' # oauth2 provider's token url

c.GenericOAuthenticator.userdata_url = 'https://sandbox.orcid.org/oauth/userinfo' # oauth2 provider's endpoint with user data

c.GenericOAuthenticator.userdata_method = 'GET' # method used to request user data endpoint

c.GenericOAuthenticator.userdata_params = {"Accept": "application/json"} # params to send for userdata endpoint

c.GenericOAuthenticator.username_key = 'PRIMARY_EMAIL

[Wilmers, Catalina]

Hi,

Your URL is missing the scope parameter, if you add "&scope=/authenticate" it should work. Try:

https://sandbox.orcid.org/oauth/authorize?state=eyJzdGF0ZV9pZCI6ICJhYzVkMzJiNGEzZjU0ODJlOTBiMGQzYjJiNzkwNGFlYSIsICJuZXh0X3VybCI6ICIifQ%3D%3D&client_id=APP-M29Z8EEBM7HAB10J&response_type=code&redirect_uri=http%3A%2F%2F50.116.16.56%3A8000%2Fhub%2Foauth_callback&scope=/authenticate

Best,

-Catalina

--
You received this message because you are subscribed to the Google Groups "ORCID API Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to orcid-api-use...@googlegroups.com.
To post to this group, send email to orcid-a...@googlegroups.com.
Visit this group at https://groups.google.com/group/orcid-api-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/orcid-api-users/80cc5b03-0ee7-4cad-852b-d163702a3117%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.