The code that processes the URL used to redirect to the app after the web authentication expects a "oauth_token" parameter.
However, if the user cancels the sign-in procedure and clicks the "Return to \<app>" button, the URL doesn't contain such a parameter; it only contains a "denied" parameter, whose argument is the aoth token. I.e.: "twitterkit-\<consumer key>://callback?app=\<consumer key>&denied=\<oauth token>".
This change looks for the "denied" parameter in case the "oath_token" parameter can't be found, so that the redirect can complete successfully.
…hentication.
The code that processes the URL used to redirect to the app after the web authentication expects a "oauth_token" parameter.
However, if the user cancels the sign-in procedure and clicks the "Return to \<app>" button, the URL doesn't contain such a parameter; it only contains a "denied" parameter, whose argument is the aoth token. I.e.: "twitterkit-\<consumer key>://callback?app=\<consumer key>&denied=\<oauth token>".
This change looks for the "denied" parameter in case the "oath_token" parameter can't be found, so that the redirect can complete successfully.