Cannot set up Reddit as an identity provider due to `openid` automatically being appended to scope #37587

Paul-E · 2025-02-23T19:39:58Z

Paul-E
Feb 23, 2025

I'm try to add Reddit as an identity provider via their Oauth API. Unfortunately they don't recognize openid as a scope, see their list of scope here. This results in an "invalid scope requested" error from Reddit.

When I configure the OpenID Connect settings and set the Scopes field to only contain identity, Keycloak still appends openid to the scopes sent to reddit.

Is there any way to avoid appending the openid scope?

EDIT: I didn't realize that Oauth and OIDC are slightly different things, and Reddit only supports OAuth 2.0 but not OIDC. It looks like this issue is similar to

Answered by Paul-E

Mar 5, 2025

This looks like the best solution: https://keycloak.discourse.group/t/using-oauth-2-0-with-keycloak-as-an-identity-provider/28959

View full answer

darius-m · 2025-02-24T10:30:05Z

darius-m
Feb 24, 2025

The openid scope is required for authentication requests, as per section 3.1.2.1 of the OpenID specifications - https://openid.net/specs/openid-connect-core-1_0-final.html#AuthRequest. The same paragraph mentions that unknown scopes should (as in, may not, but it is advised to) be ignored on the IdP side. In this case Keycloak likely went with the approach of enforcing the specs as a client, in case someone does not configure the value correctly.

1 reply

Paul-E Mar 5, 2025
Author

Does this mean it is impossible to support Reddit auth unless Reddit changes their implementation, or is there a path to supporting Reddit auth via Keycloak without changes on Reddit's side?

Paul-E · 2025-03-05T22:20:56Z

Paul-E
Mar 5, 2025
Author

This looks like the best solution: https://keycloak.discourse.group/t/using-oauth-2-0-with-keycloak-as-an-identity-provider/28959

0 replies

Navigation Menu

Repository navigation

Cannot set up Reddit as an identity provider due to `openid` automatically being appended to scope #37587

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 2 comments 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

Cannot set up Reddit as an identity provider due to openid automatically being appended to scope #37587

Uh oh!

Uh oh!

Paul-E Feb 23, 2025

Replies: 2 comments · 1 reply

Uh oh!

darius-m Feb 24, 2025

Uh oh!

Paul-E Mar 5, 2025 Author

Uh oh!

Paul-E Mar 5, 2025 Author

Cannot set up Reddit as an identity provider due to `openid` automatically being appended to scope #37587

Paul-E
Feb 23, 2025

Replies: 2 comments 1 reply

darius-m
Feb 24, 2025

Paul-E Mar 5, 2025
Author

Paul-E
Mar 5, 2025
Author