Twitteroauth has been working on my site but my users just started complaining the past week it is not working when they try to login with Twitter. I found there is a ‘invalid oauth verifier parameter’ when requesting for the access token after the user authorization callback from Twitter. I updated the library with the latest master from git and I am still seeing the same error. Can you please help?
This is a debug dump:
The Authorization header:
string(348) “Authorization: OAuth oauth_version=“1.0”, oauth_nonce=“c0243992c4cdc7be81db51539c8a2b73”, oauth_timestamp=“1442564353”, oauth_consumer_key=”…", oauth_token=“dIEhcQAAAAAAeIQEAAABT9-I1IY”, oauth_verifier=“wAbSlC7wGDOa6IztGzl0dGMfgmgAgRQx”, oauth_signature_method=“HMAC-SHA1”, oauth_signature=“UPNEmlCVA8%2B6d4o5ejw7KM7azpI%3D”"
Options:
array(14) { [41]=> bool(true) [10065]=> string(74) “/var/www/html/wp-content/themes/make-child/Abraham/TwitterOAuth/cacert.pem” [78]=> int(5) [42]=> bool(true) [10023]=> array(3) { [0]=> string(24) “Accept: application/json” [1]=> string(348) “Authorization: OAuth oauth_version=“1.0”, oauth_nonce=“c0243992c4cdc7be81db51539c8a2b73”, oauth_timestamp=“1442564353”, oauth_consumer_key=”…", oauth_token=“dIEhcQAAAAAAeIQEAAABT9-I1IY”, oauth_verifier=“wAbSlC7wGDOa6IztGzl0dGMfgmgAgRQx”, oauth_signature_method=“HMAC-SHA1”, oauth_signature=“UPNEmlCVA8%2B6d4o5ejw7KM7azpI%3D”" [2]=> string(7) “Expect:” } [19913]=> bool(true) [81]=> int(2) [64]=> bool(true) [13]=> int(5) [10002]=> string(42) “https://api.twitter.com/oauth/access_token” [10018]=> string(40) “TwitterOAuth (+https://twitteroauth.com)” [10102]=> string(4) “gzip” [47]=> bool(true) [10015]=> string(47) “oauth_verifier=wAbSlC7wGDOa6IztGzl0dGMfgmgAgRQx” }
Response:
string(1511) “HTTP/1.1 401 Authorization Required cache-control: no-cache, no-store, must-revalidate, pre-check=0, post-check=0 content-encoding: gzip content-length: 93 content-security-policy: default-src ‘none’; connect-src ‘self’; font-src …/i/csp_report?a=NVQWGYLXFVWG6Z3JNY%3D%3D%3D%3D%3D%3D&ro=false; content-type: text/html;charset=utf-8 date: Fri, 18 Sep 2015 08:19:28 GMT expires: Tue, 31 Mar 1981 05:00:00 GMT last-modified: Fri, 18 Sep 2015 08:19:28 GMT ml: S pragma: no-cache server: tsa_a set-cookie: guest_id=v1%3A144256436841283344; Domain=.twitter.com; Path=/; Expires=Sun, 17-Sep-2017 08:19:28 UTC status: 401 Unauthorized strict-transport-security: max-age=631138519 www-authenticate: OAuth realm=“https://api.twitter.com” x-connection-hash: 5a9bbf869593d46b372f36f1d374080f x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-response-time: 232 x-transaction: 9acc051f6c72e75d x-tsa-request-body-time: 1 x-twitter-response-tags: BouncerCompliant x-ua-compatible: IE=edge,chrome=1 x-xss-protection: 1; mode=block Error processing your OAuth request: Invalid oauth_verifier parameter”
