NodeBB SSO Plug-in Flow

[danielflippance]

I'm using the following sample SSO plug-in as an OAuth2 client for an OAuth2orize server and have some questions about how it works:

https://github.com/julianlam/nodebb-plugin-sso-oauth

I've forked the above code from GitHub and modified the library.js file with my URLs and parameters as suggested in the code comments.

My expectation was that the process would flow like this:

1. Client calls server to authenticate
2. Server authenticates, asks about granting access to resources and redirects back to client with an authentication code.
3. Client then calls the server to exchange the authentication code for an access token
4. Server responds with an access token
5. Client then calls the server to get user info, passing the access token
6. Server responds with user info JSON

Looking at my logs, I see that step 3 doesn't happen, but instead the flow goes straight to step 5. The problem I have is that step 5 requires an access token which it doesn't have, so the auth fails.

Am I not understanding something about the way this works or do I need to make some more code changes to the sample sso plugin?

[danielflippance]

Found the problem: Step 3 requires that the server accept HTTP POST - I was only accepting GET.