Closed fumikito closed 8 years ago
@jaredhanson How about my PR? I'm afraid about check tool's failures.
I've merged this and then corrected it to only add the redirect URL if the callback is not confirmed, as seen in a8cdf3b
Adding oauth_callback
to the user authorization request is defined by OAuth 1.0. However, OAuth 1.0a revises the specification, and expects oauth_callback
to be supplied in the request token request.
Any strategies that use OAuth 1.0a and continue to require oauth_callback
in the user authorization request will need to add it explicitly by overriding userAuthorizationParams()
.
@jaredhanson Thanks for detailed description!
It seems that:
This problem seems to have something with this issue of passport-oauth.
I tried OAuth 1.0a ready WordPress' OAuth Rest server and confirmed this patch will fix it. Test passed.