From d9c606a1c259b9751d524d82bfde26d3b9d17c15 Mon Sep 17 00:00:00 2001 From: Torsten Dittmann Date: Wed, 1 Apr 2026 13:15:22 +0400 Subject: [PATCH] fix(oauth): update Yahoo OAuth scopes from deprecated Social Directory API to OIDC The Yahoo OAuth provider was using deprecated Social Directory API scopes ('sdct-r' and 'sdpp-w') which are no longer valid and causing authentication failures with the error: invalid_scope Changes: - Replace deprecated scopes 'sdct-r' (Social Directory Contacts Read) and 'sdpp-w' (Social Directory Profile Write) with standard OIDC scopes - Add 'openid' scope for OpenID Connect authentication - Add 'profile' scope for basic profile information - Add 'email' scope for email address access These new scopes align with Yahoo's OpenID Connect implementation and are listed in their discovery document at: https://api.login.yahoo.com/.well-known/openid-configuration The Yahoo adapter already uses the OIDC userinfo endpoint (https://api.login.yahoo.com/openid/v1/userinfo), so these scopes are the correct choice for authentication. Custom scopes passed via the API are still supported and will be merged with these defaults via the base OAuth2 class constructor. Fixes: Yahoo OAuth authentication returning 'invalid_scope' error --- src/Appwrite/Auth/OAuth2/Yahoo.php | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/Appwrite/Auth/OAuth2/Yahoo.php b/src/Appwrite/Auth/OAuth2/Yahoo.php index c70a2fb6c9..1a6c6b860d 100644 --- a/src/Appwrite/Auth/OAuth2/Yahoo.php +++ b/src/Appwrite/Auth/OAuth2/Yahoo.php @@ -23,8 +23,9 @@ class Yahoo extends OAuth2 * @var array */ protected array $scopes = [ - 'sdct-r', - 'sdpp-w', + 'openid', + 'profile', + 'email', ]; /**