Oauth / Username issue


We currently have RocketChat setup using the MiniOrange oauth plugin so the users can authenticate with Wordpress.

In the oauth section in RocketChat, we removed username from the username field so users can pick their own username. This works great … the first time.

When the users come back to login again, they authenticate with the miniOrange oauth plugin / WP and then get prompted with this message from RocketChat:

This email has already been used and has not been verified. Please change your password.

A couple things to note:
The email address has already been verified even though we don’t have that as a requirement.
If the user enters ANY info in the box and hits Reset, the issue goes away.
When the user comes back again, they continue to authenticate like they did before. Their password hasn’t been changed.
I found an error in the log file (see below)

I worked with Yash with miniOrange and we don’t think the issue is related to their plugin.

Any ideas or suggestions?

Server Setup Information

  • Version of Rocket.Chat Server: 4.6.3
  • Operating System: Ubuntu
  • Deployment Method: snap
  • Number of Running Instances: 1
  • DB Replicaset Oplog: Enabled
  • NodeJS Version: v14.18.3
  • MongoDB Version: 4.2.17 / wiredTiger (oplog Enabled)
  • Proxy:
  • Firewalls involved:

Any additional Information

{“level”:50,“time”:“2022-06-13T22:04:30.488Z”,“pid”:154311,“hostname”:“rocketchat-xxxxx”,“name”:“System”,“msg”:“Exception while invoking method getPasswordPolicy ‘Match error: Missing key ‘token’’”}