OAuth

5 views

Skip to first unread message

John Kristian

unread,

Nov 14, 2007, 7:23:28 PM11/14/07

to Twitter Development Talk

Twitter's OAuth Service Provider is lagging behind http://oauth.net/documentation/spec

In particular, I notice that Twitter user authorization redirects to
the wrong URL. It ignores the oauth_callback parameter of the first
GET. Instead, it appears to use the callback URL statically
registered for that consumer. Also, it appends ?token= to the URL,
regardless of whether the URL already had a query string. It should
append & (not ?) if the URL already has a query string. Also, the
parameter name should be oauth_token (not token).

Forwarned is forearmed. :-)

Alex Payne

unread,

Nov 14, 2007, 8:59:24 PM11/14/07

to twitter-deve...@googlegroups.com

We're aware that it's not up to the spec, and that's part of why we
haven't announced official support for OAuth just yet. When it's
ready, this list will be the first to know :) In the meantime, thanks
for your bug report.