Scopes not working for Google on Android

[jasongrishkoff]

Hi there,

I'm trying to pass scope to Google as follows:

        manager.authorize('google', {scopes: 'profile email'})
            .then(resp => this.cleanLoginData('google',resp.response))
            .catch(err => console.log('There was an error'))

However, that doesn't seem to provide the email when I try to call manager.makeRequest('google',googleUrl) to https://www.googleapis.com/oauth2/v1/userinfo?alt=json.

The solution was to go into android/src/main/java/io/fullstack/oauth/OAuthManagerProviders.java and change line 101 to String scope = "profile email";

Is this a known issue, or am I doing something wrong? I notice that a lot of the language in the java files refers to "scope" rather than "scopes" (with the "s"), as passed in the above authorize code snippet. Could this be the issue?

Thanks!
Jason

[brunolemos]

Apparently scopes are not working on Android at all.

I tried with github and did not work as well.
And it means github login is not supported on android because the scope is a required field to return a valid access token.

cc @auser

[LaurelOlson]

Try including scope in the config constant along with the client_id and client_secret instead of in the options hash like so:

    const config =  {
      github: {
        client_id: Platform.OS === 'ios' ? Config.GITHUB_CLIENT_ID : Config.GITHUB_CLIENT_ID_ANDROID,
        client_secret: Platform.OS === 'ios' ? Config.GITHUB_CLIENT_SECRET : Config.GITHUB_CLIENT_SECRET_ANDROID,
        scope: 'user'
      }
    }

[brunolemos]

@LaurelOlson I can try that, thanks, but would only partially fix the problem because the app has multiple github login buttons to support different scopes (public, private, ...)

[auser]

That config is dynamic, @brunolemos You can send any ole' config with any authorize() request

[brunolemos]

@auser this is what I'm currently doing and works fine on iOS, but not android:

manager.authorize('github', { scopes: 'repo notifications' })

Are you saying that there is a different format that would work on both iOS and Android?

[brunolemos]

I searched this repository for "scopes" and I could find the parameter being used in the iOS native module but not on Android's.

[auser]

Yikes! Just pushed a fix for this. Thanks for the heads up!

[brunolemos]

Hi @auser, still not working for GitHub...

With the new update, I can pass the scopes field in the github config object. But:

1. It still don't receive the scopes parameter passed on .authorize('github', { scopes: '...' }) method.
2. The response coming from the authorize method is different from the IOS and does not contain the access_token field on it.

[auser]

are you getting a credentials key back? (https://github.com/fullstackreact/react-native-oauth/blob/master/ios/OAuthManager/OAuthManager.m#L560-L572)

And when you pass scopes are you seeing it in the logs with the scopes?

[brunolemos]

@auser:

CONFIGURE

manager.configure({
    github: {
        client_id: '...',
        client_secret: '...',
        redirect_uri: 'http://localhost/github',
        scope: 'user **public_repo** notifications read:org',
        scopes: 'user **public_repo** notifications read:org',
    },
});

ps1: I'm using both scope and scopes just to test
ps2: the ** is just to show Im using different scopes on authorize method below

AUTHORIZE

manager.authorize('github', { 
    scope: 'user **repo** notifications read:org',
    scopes: 'user **repo** notifications read:org'
});

iOS RESPONSE

iOS response is fine. It has the accessToken, so it works. It doesn't have the scope field though.

ANDROID RESPONSE

The android response is totally diferrent and doesn't have the accessToken needed.

[brunolemos]

@auser do you prefer that I open a new issue or could you just reopen this one?

[auser]

This should be relatively easy to update. Interested in contributing? The credentials for iOS (look fine, yes?) are in the OAuthClient[1/2].m files. For Android, it's handled in the Manager.