Yahoo API Error

Hello,

I have an issue with Yahoo and get the following Joomla system message:
Yahoo API Error: Access forbidden for the user as cookie validation failed

Basically, get directed to Yahoo, accept the connection request but get returned to the website and the error message comes up.

Any insights?

Thanks

Thanks Alex,

Some feedback on this issue

1. I couldn't get the JFBConnect Yahoo login to work and always came up with the API Error message. Entered and reentered my id several times to no effect.
2. I noticed that the JFBConnect Yahoo code assumes an OAuth1 flow while Yahoo appears to have switched to an OAuth2 flow. Actually, documentation on the OAuth1 flow on the Yahoo website returns a 404 error.
3. I changed the JFBConnect code for Yahoo to follow an OAuth2 flow, and the login now works ... with the same id creds as before that didn't work with the supplied OAuth1 flow.

So, I think a second look at the JFBConnect Yahoo code might be needed and that an update might be required.

Also, the documentation currently suggests using 'Read Public' under 'Profiles (Social Directory)'. However, this now only returns the user guid as anything of value in terms of authentication and the users therefore still gets the registration page to fill in the first time. To get the user's name, email address and such, 'Read/Write Public and Private' needs to be selected from my tests.

I chose to stick with the limited 'Read Public' as asking people for Write Access to their stuff seemed a step too far and anyone actually reading the request would most likely decline. This limitation on the 'Read Public' scope severely limits the usefulness of Yahoo as a OAuth provider IMO. Facebook has more or less the same scope here but has the option to additionally request the email address. With Yahoo, you either get nothing or have to ask for everything.

Anyway, hope the update is useful.

Good luck with the tests and release.

Finally settled on the openid connect flow with the elevated permissions request...scope = 'openid sdpp-w'.

Also implemented a Disqus oauth2 provider. They don't return firstname / lastname but email is always sent.

Anyway, looking forward to the update!

Hi,
I have the same problem with the Yahoo API, so please let us know when the fix is available.
Regards,
Franck

Attached are files from my hacked version:

- /components/com_jfbconnect/libraries/profile/yahoo.php
- /components/com_jfbconnect/libraries/provider

Works for me but Caveat Emptor!

Might be helpful to Mel in updating things as well.

Remember the first rule of hacking someone else's work ... never overwrite their stuff. So, rename the existing files in the folders which are under /components/com_jfbconnect/libraries and then put these in instead.

Your Yahoo App needs to request 'Read/Write Public and Private' in the permissions. If you had previously followed the instructions and set up the App to request 'Read Public', this can't be changed and you will need to add a new App, or delete and add the App again if you want to maintain the name, with the new permission request and use this instead.

Remember to update the Yahoo API Keys in JFBC.



yahoo-fix.zip