oAuth2 SSO with Yahoo! fails

[ww9rivers]

I tried to use this plugin with Yahoo!'s oAuth2. It seems to connect to Yahoo with auth request, but strangely I got an JSON object back:

{"error":{"localizedMessage":"not found","errorId":"NOT_FOUND","message":"not found"}}

This is the Yahoo guide I followed. I configured the Authorization URL (https://api.login.yahoo.com/oauth2/request_auth/), Token URL (https://api.login.yahoo.com/oauth2/get_token), Client ID, Client Secret.

With the default scope (openid email profile), I chose "Confidential Client - Choose for traditional web apps" as oAuth Client Type and selected (OpenID Connect Permissions: Email + Profile) for API Permissions on Yahoo!.

Am I doing it right? Has anyone been able to get Yahoo! oAuth2 to work with this plugin?

[julianlam]

Hi there, are you still having issues getting this working?

[ww9rivers]

Yes. Still exactly the same problem.

I am running NodeBB 3.11.0 and nodebb-plugin-sso-oauth2-multiple 1.4.2 now.

[julianlam]

I think the localizedMessage part might be coming from Yahoo's side, so I am not quite sure what isn't being found (perhaps the user info URL).

Do the Yahoo! docs specify a different user info URL? Which one is configured on your site ?

[ww9rivers]

It took me a long while to get back to this issue: The initial errors I got seemed to have come from a trailing "/" I had in the "Authorization URL" configuration in NodeBB.

After I fixed that, I am still getting other errors, that I think is from the "Redirect URI" I put in Yahoo oAuth2 app config. When I have https://<my-domain>/auth/yahoo/callback in there, the login seem to succeed. Then I get a 500 error from NodeBB.

When I just have https://<my-domain>, I get an HTML response from Yahoo with an "invalid redirect uri" that I can see in the browser DevTools:

GET |  
scheme | https
host | api.login.yahoo.com
filename | /oauth2/error
 
client_id | . . . . . .
error | invalid_request
error_description | invalid redirect uri

I have updated NodeBB to version 4.7.0 and nodebb-plugin-sso-oauth2-multiple to 1.5.2 now.

[Edit]: there are messages like this in the NodeBB logs:

2025-12-01T00:41:56.766Z [4567/2198494] - error: GET /auth/yahoo/callback?code=. . . . . .&state=. . . . .
undefined

Much appreciate your help and happy holidays!