#1

Hi all,

I’m trying to fix a legacy web app that authenticated with twitter.

I have created the required whitelisted URLs but this means I must pass a querystring parameter with the callback url so that the callback server knows what to do with the token (I have to update a database based on the querystring value).

The payload in this legacy app is passed as a querystring like;

https://api.twitter.com/oauth/request_token?oauth_callback=https%3A%2F%2Fexample.co.uk%2Fvk%2Fcallback.htm%26mytoken%3D26FBC1CF-5A9F-43D8-8DA5-CC556EF1B867%3Fmytokentype%3Dadmin&oauth_consumer_key=***********&oauth_nonce=1576965227&oauth_signature_method=HMAC-SHA1&oauth_timestamp=1533121843&oauth_version=1.0&oauth_signature=**********

But the request fails as the call back url does not match the whitelisted version. If I remove the querystring parameters from the callback url it works but then my callback script doesnt have the info it needs.

How do I add callback url parameters…?

Thanks

#2

As I understand it, query parameters on a callback URL should work. In the example above, if I’m reading it right, you want the values of mytoken and mytokentype passed back to your target callback URL, correct?

Example comment indicating callback params work:

2 Likes
#4

Thanks for that…the parameters were being added fine with regular url encoding but were being stripped later in the process. Doh!

Thanks
Rolf

2 Likes
#5