airbytehq / airbytehq/airbyte

LinkedIn Ads OAuth: r_emailaddress and r_liteprofile scopes deprecated

Open
#72,887 7 comments 0 reactions 0 assignees View on GitHub
area/connectors autoteam community needs-triage team/extensibility team/use type/bug
Dominant language
Python
Stars
22.1k
Forks
5.3k
PR merge metrics
PR metrics pending

Description

### Connector Name
linkedin-ads

### Connector Version

5.6.2

### What step the error happened?
During OAuth authentication (before any sync)

### Relevant information
Airbyte includes deprecated LinkedIn scopes (`r_emailaddress`, `r_liteprofile`) in the OAuth authorization request. For new LinkedIn developer apps, these scopes are no longer authorized and LinkedIn rejects the request with an unauthorized_scope error.

### Steps to reproduce
1. Create LinkedIn Ads dev app
2. Start LinkedIn Ads source in Airbyte Cloud
3. Click Authenticate
4. LinkedIn returns error due to deprecated scopes

### Expected behavior
OAuth should succeed. Airbyte should not request deprecated scopes; only supported scopes should be used.

### Actual behavior
LinkedIn blocks OAuth flow with unauthorized_scope error when requesting `r_emailaddress` and `r_liteprofile`.
- Airbyte UI shows:
"OAuth login failed: Scope 'r_emailaddress' is not authorized for your application"

### OAuth URL generated by Airbyte (sanitized)
https://www.linkedin.com/oauth/v2/authorization?client_id=86j65lhno0aavc&redirect_uri=https%3A%2F%2Fcloud.airbyte.com%2Fauth_flow&response_type=code&scope=r_ads_reporting+r_emailaddress+r_liteprofile+r_ads+r_basicprofile+r_organization_social&state=pbMwDQM
### Suggested fix
Remove deprecated scopes (`r_emailaddress`, `r_liteprofile`, `r_basicprofile`) and update to valid LinkedIn scopes. If email/profile are needed, use OpenID Connect scopes like `openid, profile, email`.

### Environment
- Airbyte: Cloud
- LinkedIn App Type: Production ( my own )
- Browser: Brave

### Evidence
- LinkedIn OAuth screen redirects back with an error.
- Airbyte UI shows:
"OAuth login failed: Scope 'r_emailaddress' is not authorized for your application"
- See attached screenshot.

Image

### External references
- Stack Overflow: https://stackoverflow.com/questions/77016303/dont-have-r-emailaddress-or-r-liteprofile-scopes-in-linkedin-app-api
- Auth0 Community (LinkedIn deprecation): https://community.auth0.com/t/the-linkedin-login-is-deprecated-updating-to-the-new-scopes-is-necessary/113696

### Related issues
Related issue:: https://github.com/airbytehq/airbyte/issues/68679

### Relevant log output

```shell

```

### Contribute

- [ ] Yes, I want to contribute

---
**Internal Tracking:** https://github.com/airbytehq/oncall/issues/11168

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.