使用Passport.js对接Discord授权失败问题排查

报错信息 #

InternalOAuthError: Failed to obtain access token
    at Strategy.OAuth2Strategy._createOAuthError (/home/ec2-user/website/node_modules/passport-oauth2/lib/strategy.js:423:17)
    at /home/ec2-user/website/node_modules/passport-oauth2/lib/strategy.js:177:45
    at /home/ec2-user/website/node_modules/oauth/lib/oauth2.js:191:18
    at passBackControl (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:132:9)
    at IncomingMessage.<anonymous> (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:157:7)
    at IncomingMessage.emit (node:events:525:35)
    at endReadableNT (node:internal/streams/readable:1358:12)
    at processTicksAndRejections (node:internal/process/task_queues:83:21)

InternalOAuthError: Failed to fetch the user profile.
    at /home/ec2-user/website/node_modules/passport-discord/lib/strategy.js:77:25
    at passBackControl (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:132:9)
    at IncomingMessage.<anonymous> (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:157:7)
    at IncomingMessage.emit (node:events:525:35)
    at endReadableNT (node:internal/streams/readable:1358:12)
    at processTicksAndRejections (node:internal/process/task_queues:83:21)

InternalOAuthError: Failed to fetch user's guilds
    at /home/ec2-user/website/node_modules/passport-discord/lib/strategy.js:108:32
    at passBackControl (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:132:9)
    at IncomingMessage.<anonymous> (/home/ec2-user/website/node_modules/oauth/lib/oauth2.js:157:7)
    at IncomingMessage.emit (node:events:525:35)
    at endReadableNT (node:internal/streams/readable:1358:12)
    at processTicksAndRejections (node:internal/process/task_queues:83:21)

重定向逻辑代码 #

router.get('/redirect', checkNotAuth, passport.authenticate('discord', {
  failureRedirect: "/forbidden",
  successRedirect: "/"
}));

访问链接格式 #

https://dashboard.website.com/auth/discord/redirect?code=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

核心问题 #

该异常仅在服务器部署环境中出现，本地localhost环境下完全正常。

排查与解决建议 #

• 检查Discord OAuth2重定向URI配置：登录Discord开发者平台，确认应用已添加部署环境的完整重定向URI：https://dashboard.website.com/auth/discord/redirect，部署环境的URI需单独添加，不能仅依赖本地的localhost配置。
• 核对环境变量：确认部署服务器上的Discord客户端ID、客户端密钥与本地完全一致，避免部署时漏配置或输入错误。
• 测试服务器网络连通性：在部署服务器（如EC2）上执行curl https://discord.com/api/v10/users/@me，检查是否能正常访问Discord API。若无法访问，排查服务器安全组、防火墙的出站规则，或是否存在IP被Discord拦截的情况。
• 确认HTTPS有效性：Discord OAuth要求非localhost的重定向URI必须使用HTTPS，检查部署环境的SSL证书是否有效，网站是否能正常通过HTTPS访问，无跳转异常。
• 统一依赖版本：对比本地与部署环境的passport-discord、passport-oauth2版本，确保依赖版本一致，避免版本兼容性问题。

内容的提问来源于stack exchange，提问作者Mehdi