Hi @dlizcano ,
You’re probably encountering this issue:
opened 04:02PM - 05 Sep 23 UTC
**Describe the bug**

**To Reproduce**
Steps to reproduce the behavior:
1. With orcidProfile-v1_1_2-28 version
2. After requesting a publication author the authorization for binding ORCID
3. And after the author received the email and click the "Register or connect your ORCID iD" link
4. And after he log in in ORCID and authorize
5. The "ORCID authorization link has already been used or is invalid" message is shown.
**Expected behavior**
A successfully binding is expected.
**Additional context**
The issue is related with the interaction with ORCID API, after the users authorized, a request is made to ORCID to grab a token using the URL:
```
https://pub.orcid.org/oauth/token
```
but Orcid is retrieving an `307 Temporary Redirect HTTP Code` to a different URL:
```
https://orcid.org/oauth/token
```
currently the orcidProfile plugin doesn't know how to deal with this redirect, so that error is shown.
A quick workaround for this is to change the `ORCID_API_URL_PUBLIC` setting to:
``` php
define('ORCID_API_URL_PUBLIC', 'https://orcid.org/');
```
It appears to be related to a server-side change at ORCiD; we’re talking with them to see if they can revert it. Meanwhile the linked issue has a work-around.
Regards,
Alec Smecher
Public Knowledge Project Team
1 Like