Account Options

  1. Sign in
The old Google Groups will be going away soon, but your browser is incompatible with the new version.
Google Groups Home
« Groups Home
oauth flow ignoring oauth_callback?
There are currently too many topics in this group that display first. To make this topic appear first, remove this option from another topic.
There was an error processing your request. Please try again.
flag
  11 messages - Collapse all  -  Translate all to Translated (View all originals)
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Followup To:
Add Cc | Add Followup-to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers you hear
 
Travis Vachon  
View profile  
 More options Jul 21 2011, 9:20 pm
From: Travis Vachon <tra...@copious.com>
Date: Thu, 21 Jul 2011 18:20:51 -0700 (PDT)
Local: Thurs, Jul 21 2011 9:20 pm
Subject: oauth flow ignoring oauth_callback?
Hi there

I'm using omniauth to connect to tumblr in my app, and can't seem to
get tumblr to respect the value of oauth_callback I'm passing when I
get a request token. The request token request/response looks like:

<- "POST /oauth/request_token HTTP/1.1\r\nAccept: */*\r\nUser-Agent:
OAuth gem v0.4.5\r\nContent-Length: 0\r\nAuthorization: OAuth
oauth_body_hash=\"2jmj7l5rSw0yVb%2FvlWAYkK%2FYBwk%3D\", oauth_callback=
\"http%3A%2F%2Flocal.copious.com%3A3000%2Fauth%2Ftumblr%2Fcallback\",
oauth_consumer_key=\"key\", oauth_nonce=\"nonce\", oauth_signature=
\"sig\", oauth_signature_method=\"HMAC-SHA1\", oauth_timestamp=
\"1311296463\", oauth_version=\"1.0\"\r\nConnection: close\r\nHost:
www.tumblr.com\r\n\r\n"
-> "HTTP/1.1 200 OK\r\n"
-> "Date: Fri, 22 Jul 2011 01:01:03 GMT\r\n"
-> "Server: Apache\r\n"
-> "P3P: CP=\"ALL ADM DEV PSAi COM OUR OTRo STP IND ONL\"\r\n"
-> "Vary: Accept-Encoding\r\n"
-> "X-Tumblr-Usec: D=31950\r\n"
-> "Content-Length: 162\r\n"
-> "Connection: close\r\n"
-> "Content-Type: application/x-www-form-urlencoded\r\n"
-> "\r\n"
reading 162 bytes...
->
"oauth_token=thetokenIgetback&oauth_token_secret=thesecretIgetback&oauth_ca llback_confirmed=true"

The key bits are the oauth callback:

oauth_callback=\"http%3A%2F%2Flocal.copious.com%3A3000%2Fauth%2Ftumblr
%2Fcallback\"

and the confirmation:

oauth_callback_confirmed=true

Despite this, however, the response to the authorize call is always a
redirect to the default callback url I've configured in my tumblr
application:

http://www.tumblr.com/oauth/authorize?oauth_token=thetokenIgetback

302 blah blah
Location        http://copious.com/auth/tumblr/callback?oauth_token=thetokenIgetback&...

Is this a known issue? FWIW, the twitter oauth api seems do the right
thing, and the request/response chain seems to be about the same
otherwise.

Thanks! Let me know if I can provide any more information.

Travis


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Dennis Rybalchenko  
View profile  
 More options Jul 24 2011, 2:50 pm
From: Dennis Rybalchenko <sauronfromli...@gmail.com>
Date: Sun, 24 Jul 2011 11:50:19 -0700 (PDT)
Local: Sun, Jul 24 2011 2:50 pm
Subject: Re: oauth flow ignoring oauth_callback?
Hello.

It seems that it is common issue for now. I also can not get redirect
where i need, it only redirects to the default url, though i always
get oauth_callback_confirmed=true .
It needs some clarification from Tumblr guys.

On 22 июл, 04:20, Travis Vachon <tra...@copious.com> wrote:


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
jesse  
View profile  
 More options Jul 26 2011, 12:25 pm
From: jesse <resistanceisfut...@gmail.com>
Date: Tue, 26 Jul 2011 09:25:16 -0700 (PDT)
Local: Tues, Jul 26 2011 12:25 pm
Subject: Re: oauth flow ignoring oauth_callback?
For what it's worth, I've run into this with other APIs (FB springs to
mind, although it may be fixed now).

What I generally do is throw the user's current page on my site into a
cookie and then have my bounceback page read the cookie and send the
user back to where they were. Sometimes it doesn't make sense to do it
(like they came from a page that doesn't make any sense once the user
is "connected"), so your particular logic might be more complex, but
it works. It also keeps it in your control rather than dealing with
the external dependency at all.

On Jul 24, 2:50 pm, Dennis Rybalchenko <sauronfromli...@gmail.com>
wrote:


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Travis Vachon  
View profile  
 More options Jul 26 2011, 2:21 pm
From: Travis Vachon <travis.vac...@gmail.com>
Date: Tue, 26 Jul 2011 11:21:08 -0700
Local: Tues, Jul 26 2011 2:21 pm
Subject: Re: oauth flow ignoring oauth_callback?
Yeah, we're doing this too - the issue I'm having is that tumblr's
oauth implementation doesn't seem to be respecting the callback URL
Omniauth is passing, and instead always using the default callback I
specified when I set up the application. This means that connecting to
tumblr in my development application results in a call to my
production app. I'm working around this for now by setting up
per-environment applications with different default callbacks.

t


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
jesse  
View profile  
 More options Jul 26 2011, 2:26 pm
From: jesse <resistanceisfut...@gmail.com>
Date: Tue, 26 Jul 2011 11:26:57 -0700 (PDT)
Local: Tues, Jul 26 2011 2:26 pm
Subject: Re: oauth flow ignoring oauth_callback?
Oh. That's entirely different. In that scenario it sounds like Tumblr
is doing The Right Thing. An OAuth server should never allow a
callback to a different domain for the supplied keys.

On Jul 26, 2:21 pm, Travis Vachon <travis.vac...@gmail.com> wrote:


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Travis Vachon  
View profile  
 More options Jul 26 2011, 2:42 pm
From: Travis Vachon <travis.vac...@gmail.com>
Date: Tue, 26 Jul 2011 11:42:35 -0700
Local: Tues, Jul 26 2011 2:42 pm
Subject: Re: oauth flow ignoring oauth_callback?
Huh. This does seem to work with twitter's oauth implementation - we
have one application set up, and twitter calls back to the correct
per-environment domain. We've set up our development and staging
environments as subdomains of our main domain (eg, local.copious.com),
which perhaps explains why it works there.


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
jesse  
View profile  
 More options Jul 26 2011, 2:55 pm
From: jesse <resistanceisfut...@gmail.com>
Date: Tue, 26 Jul 2011 11:55:28 -0700 (PDT)
Local: Tues, Jul 26 2011 2:55 pm
Subject: Re: oauth flow ignoring oauth_callback?
That's interesting about Twitter. I don't recall that working in the
past, but I may have just never tried it.

Subdomains working... I have mixed feelings, I guess it makes sense.
Great for devs, for sure.

On Jul 26, 2:42 pm, Travis Vachon <travis.vac...@gmail.com> wrote:


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Jamie Wilkinson  
View profile  
 More options Aug 4 2012, 1:45 pm
From: Jamie Wilkinson <jamied...@gmail.com>
Date: Sat, 4 Aug 2012 10:45:18 -0700 (PDT)
Local: Sat, Aug 4 2012 1:45 pm
Subject: Re: oauth flow ignoring oauth_callback?

Is this still the expected behavior, that the Tumblr API completely ignores
the passed callback URL in favor of the application's registered
callback_url?

We've been forced to register redundant applications so different hostnames
can work: development, staging, production, so on and so forth.

This has been repeatedly filed as a bug against my omniauth-tumblr library
(an authentication library for Ruby and Rails applications) since almost
every other API respects this parameter:

https://github.com/jamiew/omniauth-tumblr/issues/4

Thanks,
-jamie


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Alex  
View profile  
 More options Oct 24 2012, 5:26 am
From: Alex <alexander.e...@googlemail.com>
Date: Wed, 24 Oct 2012 02:26:51 -0700 (PDT)
Local: Wed, Oct 24 2012 5:26 am
Subject: Re: oauth flow ignoring oauth_callback?

Bump to this - I am using the callback to perform app switching on iOS, but
the URL will need be different if I use Android or another platform. The
API seems to ignore oauth_callback and revert to the default callback as
reported by Jamie.


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
John Bunting  
View profile  
 More options Oct 24 2012, 9:32 am
From: John Bunting <jo...@tumblr.com>
Date: Wed, 24 Oct 2012 09:32:04 -0400
Local: Wed, Oct 24 2012 9:32 am
Subject: Re: oauth flow ignoring oauth_callback?

Most certainly should not be ignoring the callback.

http://developers.tumblr.com/post/32002964216/changelog-for-09-21-12

Can you drop some examples of urls that you are sending?

--
John Bunting

Simplicity is prerequisite for reliability
    --Edsger W. Dijkstra


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Paul  
View profile  
 More options Jan 22, 10:18 pm
From: Paul <paul.cov...@gmail.com>
Date: Tue, 22 Jan 2013 19:18:11 -0800 (PST)
Local: Tues, Jan 22 2013 10:18 pm
Subject: Re: oauth flow ignoring oauth_callback?

I found this on Ruby, but perhaps it will help you with iOS -- the
oauth_callback is not specified in the get_request_token call as it is with
Twitter, it is instead added to the end of the authorize_url.  I put it all
here: http://stackoverflow.com/questions/7786644/tumblr-oauth-callback-url/...

Hope it helps!

--Paul


 
You must Sign in before you can post messages.
To post a message you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
End of messages
« Back to Discussions « Newer topic     Older topic »