Changing app permissions on twitter causes auth dialog not to redirect to callback url

LibraryThing · 2013-03-06T13:26:16.000Z

I thought i posted this discussion issue yesterday, but it never showed up so posting again…

I’m having trouble with authentication of my app through twitter when I change the default app permissions on twitter.

Previously, I’ve had the app permissions be read-only. I went into the app on dev.twitter.com and changed my default permissions to read/write. If a user had previously authorized the app and had their permissions at read only and then tries to login to the app, it shows them the auth dialog (which makes sense since its now requesting read/write) but the problem is that when you click “Sign in” it doesn’t redirect to the callback url and just submits to https://api.twitter.com/oauth/authenticate and nothing happens.

If i revoke the app and then login, everything works fine, also new users that previously didnt have the read-only authorization for htis app also get redirected fine. Its only for users that currently have the app authorized but with a different level of permissions.

I’ve tried both by changing the default app permissions on twitter as well as modifying the the x_auth_access_type paramter to the request_token call and they behave the same way.

any idea whats going wrong here?

episod · 2013-03-06T15:07:09.000Z

Thanks for reporting this. We’re looking into this issue!

LibraryThing · 2013-03-08T16:17:41.000Z

any updates to this?

LibraryThing · 2013-03-15T14:42:09.000Z

could I get an update on this? At least a verification from twitter that this is an actual bug and not just something wrong on my end? We can’t move over to a new permission level because it would break functionality for all the users that have already accepted with the previous permission level.

episod · 2013-03-15T14:54:29.000Z

This is something we’re still working to resolve. You can mitigate in the meantime by using oauth/authorize.

mr_navdeep · 2013-06-28T11:43:10.000Z

Facing the same issue, Any updates on this?

ntlk · 2013-07-11T11:27:07.000Z

This is still happening for me too, deleting tokens doesn’t always force users to reauthorize. The permissions in my case have been lowered, breaking the login for many, but not all, users.

yandexauth · 2013-08-06T13:56:10.000Z

This bug is affecting us too. Do you have any progress?

rushmorefm · 2014-03-17T21:15:33.000Z

Hi there. Any progress with this issue? It also affect us

soufian_malih · 2014-03-18T11:16:23.000Z

Same here. any updates

df1228 · 2014-08-13T00:39:19.000Z

same here, any updates?

thanks !