Details
-
Improvement
-
Status: Closed
-
Major
-
Resolution: Fixed
-
3.11, 4.0
-
MOODLE_311_STABLE, MOODLE_400_STABLE
-
MOODLE_311_STABLE
-
MOODLE_311_
MDL-71254 -
master_
MDL-71254 -
- Navigate to admin/settings.php?section=manageauths and enable OAuth 2 authentication plugin.
- Configure Microsoft OAuth2 service as described here https://docs.moodle.org/310/en/OAuth_2_Microsoft_service
- Log out.
- Head to https://account.microsoft.com/account and log into your account.
- Click on the Privacy tab at the top of the page. You may need to verify your identity via an email code.
- Scroll down to the Other privacy settings section.
- Go to Apps and services > Apps and services that can access your data.
- Review the list of apps and establish which you want to revoke.
- Click on Edit below the corresponding app's name.
- Select Remove these permissions.
- Navigate to your moodle login page.
- Click on Microsoft button.
- Enter your email address and password.
- When account.live.com asks for your confirmation of logging click No:
- Confirm, that login page is displayed.
- Confirm, that "The user has denied access to the scope requested by the client application." error is displayed.
Navigate to admin/settings.php?section=manageauths and enable OAuth 2 authentication plugin. Configure Microsoft OAuth2 service as described here https://docs.moodle.org/310/en/OAuth_2_Microsoft_service Log out. Head to https://account.microsoft.com/account and log into your account. Click on the Privacy tab at the top of the page. You may need to verify your identity via an email code. Scroll down to the Other privacy settings section. Go to Apps and services > Apps and services that can access your data. Review the list of apps and establish which you want to revoke. Click on Edit below the corresponding app's name. Select Remove these permissions. Navigate to your moodle login page. Click on Microsoft button. Enter your email address and password. When account.live.com asks for your confirmation of logging click No: Confirm , that login page is displayed. Confirm , that "The user has denied access to the scope requested by the client application." error is displayed.
Description
When something goes wrong with OAuth2 and an error is returned back to the admin/oauth2callback.php script it just prints the error, while it would be better to redirect back to the login page and display the error there. So this would be consistent with other login errors like wrong password or suspended user.
Screenshot:
