Ios Twitter Kit 1.10.1 - TWTRLogInButton responds with -1012 error

[man_derson]

Same here, only on user’s test devices. iOS 8.4.1 and iOS 9.0.2 are examples, iPhone 5 and iPhone 6.

[nedrockson]

Just had a conversation with a guy on 8.1.x and iphone 5 and it turns out the twitter account he had stored on his device had the wrong password. Guessing it was from a restored phone but there’s no way to know. Basically, Twitter needs to gracefully handle this case and present the login web dialog if possible – any way to do this without waiting for an update?

[nedrockson]

After a fair amount of debugging, I have found a way to reproduce this case, but still not 100% sure on a solution:

1. Go to twitter applications in settings using the web
2. Revoke access to the iOS app
3. Navigate to twitter settings within the settings app on your iPhone & when clicking on your twitter account, ensure you’re notified that the password is incorrect.
4. Attempt to login

Result: Error code -1012
Expected: Show the login with twitter screen

Now here’s an interesting thing – the phone believes that it is authorized to use the twitter credentials for the app so the twitter library assumes the password must be wrong (hence the -1012, or authorization header being incorrect), so this can be fixed by simply swiping the authorization to use the twitter credentials to “no” within settings. This forces the flow of the app to bring up the web authorization dialog.

I am still looking for a solution but if this gets the ball moving for anyone else, please respond with how you solved it!

EDIT:

This is using TwitterKit 1.12.0 (also reproduced on 1.11.4)

[keighl]

I would love an option to bypass the Accounts framework all together. The standard OAuth flow works perfectly every time.

[bonnell]

Thanks for these extra details @nedrockson, very helpful and I’ll dig in more with the team.

[nedrockson]

@bonnell No problem. out of curiosity is there any way to bypass the accounts framework entirely and force people to login? If I catch this error I want to be able to do more than say “go to settings and update your password” especially because I can’t link to twitter settings from my app.

[bonnell]

Just an update, we’re still trying to reproduce this locally, but are also planning a new release with additional logging to help track this down.

If anyone has a simple sample project where they can reproduce this consistently, that would also be appreciated!

-Mike

[michalhernas]

@bonnell I created fresh project, added button Login with Twitter from example and it just fails.
iOS 9.1, I have 2 accounts authenticated on my iPhone. Twitter prompts me to select one, when I do, it gives me exact same error.

I was also authenticated to the app I am requesting access for before on a website.
I hope this helps tracing it down!

[bonnell]

@michalhernas Using Obj-C or Swift? I’ll work on a sample project to see if I can reproduce locally once again, but want to use the language you are using.

[michalhernas]

Swift.

If you would give me email I can send you zipped sources.

[bonnell]

I haven’t been able to reproduce this using this as a sample project. Let me know how this goes for you. Sample project

-Mike

[michalhernas]

Your example works differently. I put my keys and when I selected user it opened in-app web browser (what does not happen when I do it in Swift project).

However still on first try I got 500 Error in web browser. I had to cancel and click log in again then it worked.

Logs

2015-11-09 12:23:26.888 MikeTestTwitterLogin[640:206678] [Fabric] Unable to locate application icon
2015-11-09 12:23:38.637 MikeTestTwitterLogin[640:206726] [Fabric] failed to download settings Error Domain=NSURLErrorDomain Code=-1102 "You do not have permission to access the requested resource." UserInfo={NSErrorFailingURLKey=https://settings.crashlytics.com/spi/v2/platforms/ios/apps/MikeBonnell.MikeTestTwitterLogin/settings?build_version=1&display_version=1.0&instance=d586bb4869fa48f32f1b761d13f5871c57dcb71d&source=1, NSLocalizedDescription=You do not have permission to access the requested resource., NSErrorFailingURLStringKey=https://settings.crashlytics.com/spi/v2/platforms/ios/apps/MikeBonnell.MikeTestTwitterLogin/settings?build_version=1&display_version=1.0&instance=d586bb4869fa48f32f1b761d13f5871c57dcb71d&source=1}
2015-11-09 12:24:29.315 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TwitterAPIErrorDomain Code=200 "Request failed: forbidden (403)" UserInfo={NSErrorFailingURLKey=https://api.twitter.com/1.1/guest/activate.json, NSLocalizedDescription=Request failed: forbidden (403), NSLocalizedFailureReason=Twitter API error : Forbidden. (code 200)}
2015-11-09 12:24:29.316 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.
2015-11-09 12:25:30.979 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TWTRErrorDomain Code=7 "Failed to save OAuth secret to keychain." UserInfo={NSLocalizedDescription=Failed to save OAuth secret to keychain.}
2015-11-09 12:25:30.979 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.
2015-11-09 12:25:31.877 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TwitterAPIErrorDomain Code=200 "Request failed: forbidden (403)" UserInfo={NSErrorFailingURLKey=https://api.twitter.com/1.1/guest/activate.json, NSLocalizedDescription=Request failed: forbidden (403), NSLocalizedFailureReason=Twitter API error : Forbidden. (code 200)}
2015-11-09 12:25:31.877 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.

[michalhernas]

I cleaned up my project as much as I could.
Here it is: https://dl.dropboxusercontent.com/u/1824765/test-twitter.zip

I am getting constantly this error after I click Login with Twitter and select 1 account.

[bonnell]

Thanks, I’m getting a 404 on that link, can you check that?

[GabeJacobs]

I believe I have found the problem but I can’t figure out how to reproduce it, which makes me think this is an iOS problem.

I was debugging on my friend Sam’s phone who had the issue. He had 1) Twitter app uninstalled and 2) logged out of twitter from safari.

I noticed however that he still had his account linked in the iPhone Twitter settings. When I tapped on his username an error came up that his password was wrong. Also his password field was empty. Low and behold when I reentered his password correctly, the error finally stopped.

The weird thing is that we tried resetting his password via Twitter.com and I could not get the iPhone to give me the “wrong password” error again. Even if I typed the wrong password, it wasn’t the same error. But I am pretty certain that this error comes when you are able to get it in a state where tapping the username in the iPhone settings immediately gives you a wrong password error after tapping.

[bonnell]

Thanks @GabeJacobs for sharing this. @michalhernas is it possible you’re hitting the same issue?

[michalhernas]

I don’t think so. I use Twitter app and Tweetbot and both of them work.
As I said before, it does not work on my phone that has 2 Twitter accounts configured but it works on my friends phone with 1 account. I believe this is main issue.

Scenarios I tried in Swift:

1. 1 twitter user on iOS, not authorized to my twitter app - WORKS
2. 1 twitter user on iOS, authorized to my twitter app - WORKS
3. 2 users on iOS - authorized to my twitter app - FAILS
4. 2 users on iOS - not authorized (access was revoked) to my twitter app - FAILS

Your example in Obj-C:

1. 2 users on iOS - authorized to my twitter app - WORKS (difference to Swift is that this one opens in-app browser and ask me to log in again to Twitter)

My dropbox link should work already: https://dl.dropboxusercontent.com/u/1824765/test-twitter.zip

Please check how it behaves here as I could reproduce it on this project.
Differences to Obj-C project you posted:

• It uses Swift
• I have TwitterKit imported using Pods
• I put UIButton on Storyboard and changed his callback later in viewDidLoad instead of using addSubview

I hope you can resolve this problem.
If you need more assistance please let me know. I am also right now in SF so I could even drop by to office (I would love to!)

[bonnell]

Thanks @michalhernas, I’m taking a look at your sample project and we’re also going to improve the logging around this error in our next release.

[jaredran]

@man_derson and I were wondering if instead of trying to repro, solve the route cause, and eliminate the -1012 error, you could provide a short-term solution–build into TwitterKit logic that catches the -1012 error and throws the user to the browser oauth experience.

[nedrockson]

I agree with @jaredran on this one. The framework should absolutely catch the case where there is invalid header data and ask the user to login again…