Twitter oauth after connect GET Primary email address

[mickey_ga]

Still waiting for news, I am writing an app to be ready on monday, will be a real problem if this feature is not going live!

[AnthonyIfon]

Any update or does anyone know a workaround

[Avaks]

Just wondering if there any news? Is email already somehow available through API?

[arkhipov]

So, it’s possible now to get email address via Twitter OAuth?

[andypiper]

Yes this is now available to whitelisted applications - details in the account/verify_credentials documentation.

[skylightit]

I have followed that link to verify our business account and I dont see the option to do so. We are a web app and need to have users email address for authentication.

[andypiper]

OK so the details are all there - you need to apply for whitelisting via the link on the documentation page. Once that has happened, add your privacy policy and ToS links, update your app permissions, and then call account/verify_credentials with the right set of parameters.

[skylightit]

Have gone through that page and I am not seeing any whitelisting options at all, see attached. Is that because we are in UK?

[andypiper]

Select “I need access to special authentication privileges” and in the form that appears, explain that you are requesting access to a user’s email address for your app. You’ll also be required to provide your app’s consumer key and the username of the account that it is registered to.

[pixabay]

It looks like support for web apps was either never there or has been removed. XAuth, which is required for retrieving an email address, is only available for desktop and mobile apps. The authorization form (https://support.twitter.com/forms/platform) explicitly states, no web apps are supported.

What’s up with that? Than kind of misses the whole point of this thread.

[andypiper]

“what’s up with that” - we simply haven’t been able to update the support form page yet.

XAuth is not required for accessing email and in fact is deprecated - we don’t recommend any apps use XAuth any more unless absolutely necessary as it does not support e.g. two-factor auth.

You absolutely can request that access to email address for a web app, just ignore that statement and explain the detail in your request.

[JibstaMan]

I’m having trouble retrieving the email address. I’ve gone through the process of requesting special authentication privileges (and I’ve received it). I have enabled “Request email addresses from users” within the Twitter app, as well as filled in links to the ToS and Privacy Policy. I’m not entirely sure what to do next. What do I need to do to retrieve the email address of the user?

Do I have to send a request to https://api.twitter.com/1.1/account/verify_credentials.json? I’ve tried this, but I keep getting back a “Bad authentication data.” error. I am including the Authentication header and “?include_entities=false&skip_status=1&include_email=true” query parameters.

I’m using NodeJS with passport-twitter. Passport-twitter requests user data using https://api.twitter.com/1.1/users/show.json (which succeeds), but this doesn’t return the email address. I’m using the same technique, but get a “Bad authenticated data.” error nonetheless.

Any help would be greatly appreciated.

[andypiper]

Do I have to send a request to https://api.twitter.com/1.1/account/verify_credentials.json? I’ve tried this, but I keep getting back a “Bad authentication data.” error. I am including the Authentication header and “?include_entities=false&skip_status=1&include_email=true” query parameters.

Yes, that is the correct endpoint to call (see the API docs). Note that you need to regenerate any existing tokens from before you were granted elevated privileges to request email address, as it states in the docs. If you’re getting a Bad Auth error then it sounds like there’s a problem with the OAuth setup on your call.

I’m not familiar with passport-twitter but will try to take a look when I have some time. A quick glance at the docs suggests that this just provides sign-in with Twitter functionality, and not a generalised Twitter API client - but I’m no expert in this library.

[JibstaMan]

Found the problem(s). I regenerated the tokens of the Twitter app, which didn’t help. I’ve removed access to the app from my twitter account, to make sure no old permissions were used, which didn’t help. The problem was indeed with the request, specifically, using 1.0 - which becomes “1” as string, instead of “1.0” string as OAuth version.

Thanks for verifying that I had the correct endpoint and the quick reply! Much appreciated.

[andypiper]

Ah, great - thanks for sharing the solution as well!

[VibeThemes]

Without email address which is the primary key to most databases, twitter api is useless. Understanding and integration with Twitter API takes twice more time than integrating with Google + and FB combined.

[sitecreatortest]

Hi . My site was white listed and verify_credentials.json works when I don’t add the"include_email" parameter.When I do I get a 401:unauthorzied . I regenerated all my tokens and even used a new user yet I’m still getting the same error.I’m using https://api.twitter.com/1.1/account/verify_credentials.json?include_email=true as the endpoint address .

[skylightit]

Ok followed the steps listed here and still no joy!!! following is the response we got from Twitter. For now we have disabled users to authorise signup and login with Twitter.

Google and LinkedIn authentication took less time and less headache!

Hello,

Thank you for reaching out. Twitter restricts xAuth access, and does not grant it for website-based applications, single-user applications or applications in development. These applications must use the regular OAuth process instead. You’ll find resources that will guide you through this process on our developer site.

If your application has no other recourse but to utilize xAuth, please respond to this note including the name of your application, consumer key, application ID, and a demo video link. Also provide information regarding your application’s main features and how it interacts with the Twitter API.

For comprehensive documentation on all of the Twitter API’s authentication and authorization paths, please review our documentation.

Regards,
Twitter Platform Operations

[rave_nitro]

I had submitted form on 4th June 2015 for whitelisting my app to get email access. Apart from an auto reply I did not get any other response. I had shared video links and mentioned detailed description.

what should I do further?? Please someone help me on this

[oddtwelve]

For some reason, it returns the initial email of the registration. If I chahge email on my profile page (and confirm it), still I’m getting the first email