Ios Twitter Kit 1.10.1 - TWTRLogInButton responds with -1012 error

[michalhernas]

@bonnell I created fresh project, added button Login with Twitter from example and it just fails.
iOS 9.1, I have 2 accounts authenticated on my iPhone. Twitter prompts me to select one, when I do, it gives me exact same error.

I was also authenticated to the app I am requesting access for before on a website.
I hope this helps tracing it down!

[bonnell]

@michalhernas Using Obj-C or Swift? I’ll work on a sample project to see if I can reproduce locally once again, but want to use the language you are using.

[michalhernas]

Swift.

If you would give me email I can send you zipped sources.

[bonnell]

I haven’t been able to reproduce this using this as a sample project. Let me know how this goes for you. Sample project

-Mike

[michalhernas]

Your example works differently. I put my keys and when I selected user it opened in-app web browser (what does not happen when I do it in Swift project).

However still on first try I got 500 Error in web browser. I had to cancel and click log in again then it worked.

Logs

2015-11-09 12:23:26.888 MikeTestTwitterLogin[640:206678] [Fabric] Unable to locate application icon
2015-11-09 12:23:38.637 MikeTestTwitterLogin[640:206726] [Fabric] failed to download settings Error Domain=NSURLErrorDomain Code=-1102 "You do not have permission to access the requested resource." UserInfo={NSErrorFailingURLKey=https://settings.crashlytics.com/spi/v2/platforms/ios/apps/MikeBonnell.MikeTestTwitterLogin/settings?build_version=1&display_version=1.0&instance=d586bb4869fa48f32f1b761d13f5871c57dcb71d&source=1, NSLocalizedDescription=You do not have permission to access the requested resource., NSErrorFailingURLStringKey=https://settings.crashlytics.com/spi/v2/platforms/ios/apps/MikeBonnell.MikeTestTwitterLogin/settings?build_version=1&display_version=1.0&instance=d586bb4869fa48f32f1b761d13f5871c57dcb71d&source=1}
2015-11-09 12:24:29.315 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TwitterAPIErrorDomain Code=200 "Request failed: forbidden (403)" UserInfo={NSErrorFailingURLKey=https://api.twitter.com/1.1/guest/activate.json, NSLocalizedDescription=Request failed: forbidden (403), NSLocalizedFailureReason=Twitter API error : Forbidden. (code 200)}
2015-11-09 12:24:29.316 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.
2015-11-09 12:25:30.979 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TWTRErrorDomain Code=7 "Failed to save OAuth secret to keychain." UserInfo={NSLocalizedDescription=Failed to save OAuth secret to keychain.}
2015-11-09 12:25:30.979 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.
2015-11-09 12:25:31.877 MikeTestTwitterLogin[640:206678] Guest authentication failed: Error Domain=TwitterAPIErrorDomain Code=200 "Request failed: forbidden (403)" UserInfo={NSErrorFailingURLKey=https://api.twitter.com/1.1/guest/activate.json, NSLocalizedDescription=Request failed: forbidden (403), NSLocalizedFailureReason=Twitter API error : Forbidden. (code 200)}
2015-11-09 12:25:31.877 MikeTestTwitterLogin[640:206678] [TWTRGuestSessionManager] Your app may not be enabled for guest authentication. Please contact support@fabric.io to upgrade your consumer key.

[michalhernas]

I cleaned up my project as much as I could.
Here it is: https://dl.dropboxusercontent.com/u/1824765/test-twitter.zip

I am getting constantly this error after I click Login with Twitter and select 1 account.

[bonnell]

Thanks, I’m getting a 404 on that link, can you check that?

[GabeJacobs]

I believe I have found the problem but I can’t figure out how to reproduce it, which makes me think this is an iOS problem.

I was debugging on my friend Sam’s phone who had the issue. He had 1) Twitter app uninstalled and 2) logged out of twitter from safari.

I noticed however that he still had his account linked in the iPhone Twitter settings. When I tapped on his username an error came up that his password was wrong. Also his password field was empty. Low and behold when I reentered his password correctly, the error finally stopped.

The weird thing is that we tried resetting his password via Twitter.com and I could not get the iPhone to give me the “wrong password” error again. Even if I typed the wrong password, it wasn’t the same error. But I am pretty certain that this error comes when you are able to get it in a state where tapping the username in the iPhone settings immediately gives you a wrong password error after tapping.

[bonnell]

Thanks @GabeJacobs for sharing this. @michalhernas is it possible you’re hitting the same issue?

[michalhernas]

I don’t think so. I use Twitter app and Tweetbot and both of them work.
As I said before, it does not work on my phone that has 2 Twitter accounts configured but it works on my friends phone with 1 account. I believe this is main issue.

Scenarios I tried in Swift:

1. 1 twitter user on iOS, not authorized to my twitter app - WORKS
2. 1 twitter user on iOS, authorized to my twitter app - WORKS
3. 2 users on iOS - authorized to my twitter app - FAILS
4. 2 users on iOS - not authorized (access was revoked) to my twitter app - FAILS

Your example in Obj-C:

1. 2 users on iOS - authorized to my twitter app - WORKS (difference to Swift is that this one opens in-app browser and ask me to log in again to Twitter)

My dropbox link should work already: https://dl.dropboxusercontent.com/u/1824765/test-twitter.zip

Please check how it behaves here as I could reproduce it on this project.
Differences to Obj-C project you posted:

• It uses Swift
• I have TwitterKit imported using Pods
• I put UIButton on Storyboard and changed his callback later in viewDidLoad instead of using addSubview

I hope you can resolve this problem.
If you need more assistance please let me know. I am also right now in SF so I could even drop by to office (I would love to!)

[bonnell]

Thanks @michalhernas, I’m taking a look at your sample project and we’re also going to improve the logging around this error in our next release.

[jaredran]

@man_derson and I were wondering if instead of trying to repro, solve the route cause, and eliminate the -1012 error, you could provide a short-term solution–build into TwitterKit logic that catches the -1012 error and throws the user to the browser oauth experience.

[nedrockson]

I agree with @jaredran on this one. The framework should absolutely catch the case where there is invalid header data and ask the user to login again…

[bonnell]

Thanks both @jaredran and @nedrockson, I’m chatting with the team about improvements we could make here.

-Mike

[michalhernas]

So, my App was just rejected by Apple due to this bug.

Screenshot I got from them.

[jaredran]

Sorry…felt really weird hearting that. I just wanted to emphasize that this should be addressed.

[bonnell]

Thanks for letting us know @michalhernas, we just shipped out a new version of the Kit with updated logging. Can you grab the latest - 1.13.1 of TwitterKit and let me know what you see after in the console?

[petkanics]

This has been popping up amongst a large number of our new users. When they write in for support we have to tell them to go to the iOS settings menu and de-auth twitter, which is not a good solution. It would be great if the framework either caught the exception and routed to OAuth flow in the browser as @jaredran suggested, or if the framework provided some way to allow us to bypass the native auth and pass the user directly to browser based oauth. The sooner the better though, as we get reports about this bug every day in our app. Thanks.

[chaselatta]

It appears that this error is being returned because the user’s credentials are being corrupted in the system accounts framework. We do not have access to these credentials so we cannot automatically log the user in again. However, we have implemented a fix that will watch for this error code to be returned and prompt the user to go to the settings app to update their password using the -[ACAccountStore renewCredentialsForAccount:completion:] method. This prompt will take the user directly to the settings app to enter their password. We have also introduced a new error code TWTRLogInErrorCodeSystemAccountCredentialsInvalid which will indicate that this happened. The user can then update their system account, come back to the app and attempt to log in again.

We should be shipping an update which includes this fix in the next few days. We apologize for the inconveniences that this has caused.

[keighl]

That’s great news!