cmFodWx5YWRhdjEyMTA5 / socialauth-android

Automatically exported from code.google.com/p/socialauth-android
0 stars 0 forks source link

Twitter sign in loop #190

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. Create an app in Twitter with read permissions only
2. Sign in to your app with Twitter credentials authorizing it
3. Upgrade app permissions to read & write
4. Try to sign in to your app with the same Twitter credentials than step 2
5. Authorizing the app will end in a sign in page loop

What is the expected output? What do you see instead?

Sign in correctly with Twitter credentials. Instead, there is a redirection 
loop to the https://api.twitter.com/oauth/authenticate page

What version of the product are you using? On what operating system?

socialauth-4.4
socialauth-android-3.2

Please provide any additional information below.

I think that the problem can be solved replacing the 
https://api.twitter.com/oauth/authenticate URL with 
https://api.twitter.com/oauth/authorize

Original issue reported on code.google.com by gruiz...@gmail.com on 27 Aug 2014 at 5:01

GoogleCodeExporter commented 8 years ago
Thanks for Info

We need to check at our end. It will take some time to revert.

Original comment by vineet.a...@3pillarglobal.com on 15 Sep 2014 at 9:58

GoogleCodeExporter commented 8 years ago
After searching a little more about this issue, it seems like there is a bug 
with the twitter sign in flow:

https://twittercommunity.com/t/upgrade-a-user-to-read-write/2037/8

This loop will appear to each user that allowed your app before the permission 
change, and users can solve it going to 
https://twitter.com/settings/applications , revoking your application token, 
and trying to log in with your app again.

Thank you very much for your library.

Original comment by gruiz...@gmail.com on 15 Sep 2014 at 10:17

GoogleCodeExporter commented 8 years ago
Thanks for providing inputs

Original comment by vineet.a...@3pillarglobal.com on 17 Nov 2014 at 8:47