LinkedIn deprecated OAuth login in favour of OIDC

[yktoo]

The deprecation notice:

This version of Sign In with LinkedIn has been deprecated as of August 1, 2023. For all Sign In with LinkedIn implementations going forward, please refer to Sign In with LinkedIn using OpenID Connect.

This leads to a change of scopes: instead of r_liteprofile, r_emailaddress only the following is now available:

• oidc
• profile
• email

As a consequence, fetching profile in goth now fails with 403 Forbidden (here).

[techknowlogick]

Thanks for reporting this @yktoo

In this case, would changing the scopes in the code be sufficient, or would any API endpoints need to be updated?

[yktoo]

No, I tried with the above scopes and that's what results in a 403. I'm not sure what else needs to be changed.

[trendamplifier]

I have this issue too, can verify what @yktoo said. Please advise.

[mritul]

@techknowlogick I would like to know about this too. I am getting a 403 during the callback.

Here's my setup

[yktoo]

I managed to successfully add LinkedIn login using the standard OIDC provider. In the end it turned out to be not that much different from other goth providers.

You may want to have a look at Comentario auth implementation and docs.

I believe the issue can be closed now.

[mritul]

Thanks for the prompt response @yktoo! Will do so