akirk / enable-mastodon-apps

Allow accessing your WordPress blog with Mastodon clients
https://wordpress.org/plugins/enable-mastodon-apps
GNU General Public License v2.0
34 stars 5 forks source link

Default WordPress Redirect Behavior Interrupts OAuth Dance #129

Closed DeadSuperHero closed 1 month ago

DeadSuperHero commented 2 months ago

When I try to log in with this plugin, the default redirect behavior of WordPress navigates to the article with the closest spelling possible. It navigates to this: https://wedistribute.org/2023/12/authorized-fetch-circumvented/

The URL I'm directed to is that article, with a question mark reflecting the string of client_id, values of scope, the redirect_uri value, and the response_type.

It looks like the default behavior of WordPress skips over the actual OAuth URL and goes straight to this article instead.

akirk commented 2 months ago

Hi, you're right, thank you for pointing this out! I realize that so far we relied on the fact that the WordPress site didn't have a closely matching post slug for the oauth/authorize endpoint. I'll add the necessary rewrite config.