Twitter OAuth works fine in my app then I get error when trying to login to Twitter.com site

[JimJty]

OAuth works fine in my application but then when I open a new tab to
login to twitter, I login and I get this message:

"Woah there!
This page requires some information that was not provided. Please
return to the site that sent you to this page and try again … it was
probably an honest mistake."

When I hit back on the browser, the error message goes away and I am
at my home page.

This looks to be a bug with Twitter's OAuth. Here are the steps to
reproduce:

1) Make sure you are logged out of twitter.com
2) Use a third party app to login to twitter: (you can use this demo:
http://twitteroauth.appspot.com/)
3) Open a second tab, go to twitter.com and login. You should get the
error message above?

I am not too familiar with OAuth but I have used a few different code
libraries for python and they all seem to have the same issue.
Any one experience similar?

[Michael Steuer]

Yes I experience the same. Not sure what causes it...

[Terry Jones]

> Yes I experience the same. Not sure what causes it...

I see the same thing.

> 1) Make sure you are logged out of twitter.com
> 2) Use a third party app to login to twitter: (you can use this demo:
> http://twitteroauth.appspot.com/)
> 3) Open a second tab, go to twitter.com and login. You should get the
> error message above?

I'm doing step 2 (successfully) via an app I wrote.

Terry

[Terry Jones]

Following up to myself:

> > Yes I experience the same. Not sure what causes it...
>
> I see the same thing.

The browser location bar shows http://twitter.com/oauth/authorize when you
have the error page up. So something is redirecting us to the /oauth when
we try a normal web login.

Digging a little, I see a twitter.com "_twitter_sess" cookie is pushed to
my browser by Twitter when I'm redirected to the auth page in step 2. The
cookie is set to expire at end of session. Maybe that should be changed to
have it expire in a couple of minutes, or maybe that cookie shouldn't be
pushed to us at all. Does it interfere with signing in with a second 3rd
party app?

If I remove that cookie before going to Twitter in step 3, it all works
fine.

> 1) Make sure you are logged out of twitter.com
> 2) Use a third party app to login to twitter

> 3) Open a second tab, go to twitter.com and login. You should get the
> error message above?

Terry

[Abraham Williams]

There is an issue open for this: http://code.google.com/p/twitter-api/issues/detail?id=1199

Abraham

--
Abraham Williams | Community Evangelist | http://web608.org
Hacker | http://abrah.am | http://twitter.com/abraham
Project | Awesome Lists | http://twitterli.st
This email is: [ ] blogable [x] ask first [ ] private.