Twitter OAuth problem?
-
2018-08-23T16:39:18.274Z [7288] - error: [4572/7288] /auth/twitter Error: Callback URL not approved for this client application. Approved callback URLs can be adjusted in your application settings at Strategy.parseErrorResponse (/usr/src/app/node_modules/passport-twitter/lib/strategy.js:206:12) at Strategy.OAuthStrategy._createOAuthError (/usr/src/app/node_modules/passport-oauth1/lib/strategy.js:393:16) at /usr/src/app/node_modules/passport-oauth1/lib/strategy.js:244:41 at /usr/src/app/node_modules/oauth/lib/oauth.js:543:17 at passBackControl (/usr/src/app/node_modules/oauth/lib/oauth.js:397:13) at IncomingMessage.<anonymous> (/usr/src/app/node_modules/oauth/lib/oauth.js:409:9) at emitNone (events.js:111:20) at IncomingMessage.emit (events.js:208:7) at endReadableNT (_stream_readable.js:1064:12) at /usr/src/app/node_modules/async-listener/glue.js:188:31 at _combinedTickCallback (internal/process/next_tick.js:138:11) at process._tickCallback (internal/process/next_tick.js:180:9)@ben_lubar ???
-
Not sure if that's what caused it, but all eight instances were at 100% CPU usage with no log output.
-
Just tried it myself for shits and giggles. Still not working.
The error message says you didn't configure Twitter correctly. You'll need to fix that on Twitter.
-
@Tsaukpaetra said in Twitter OAuth problem?:
Just tried it myself for shits and giggles. Still not working.
The error message says you didn't configure Twitter correctly. You'll need to fix that on Twitter.
Who owns the twitter app? @PJH? @apapadimoulis?
-
@ben_lubar said in Twitter OAuth problem?:
@Tsaukpaetra said in Twitter OAuth problem?:
Just tried it myself for shits and giggles. Still not working.
The error message says you didn't configure Twitter correctly. You'll need to fix that on Twitter.
Who owns the twitter app? @PJH? @apapadimoulis?
Why would I know that? If I knew, I'd be asking them for money.
-
@ben_lubar said in Twitter OAuth problem?:
Who owns the twitter app? @PJH? @apapadimoulis?
Looks like it might be me...
-
Twitter OAuth changes · Issue #6719 · NodeBB/NodeBB
/admin/plugins/sso-twitter links to a deprecated (as of July '18) URL: https://apps.twitter.com/ As of July 2018, you must apply for a Twitter developer account and be approved before you may c...
I've applied for a new account, still waiting for confirmation.
API keys don't appear to have changed however...
-
Well, at least it tries, but apparently the callback is still wrong.
-
@Tsaukpaetra said in Twitter OAuth problem?:
Well, at least it tries, but apparently the callback is still wrong.
@PJH said in Twitter OAuth problem?:
still waiting for confirmation.
Still waiting...
-
@PJH said in Twitter OAuth problem?:
Still waiting...
Not sure if you need to be waiting. My callback URL looks like this though:
https://what.thedailywtf.com/auth/twitter/callback?oauth_token=KBJmZgAAAAAAX6Z3AAABZXN9-SM&oauth_verifier=soal9jgGcGxY5rRKjDg1jujYGRYH7rngIf I tweak the URL to actually try it (i.e. the callback URL doesn't have /callback) I get:
Now, why it's in French is anyone's guess, but whatever...
-
-
@PJH said in Twitter OAuth problem?:
@Tsaukpaetra said in Twitter OAuth problem?:
Not sure if you need to be waiting.
Finally got approved - seem unable to get much further with this though - callback URL correct, secrets are correct; still failing...
https://what.thedailywtf.com/admin/plugins/sso-twitter
https://developer.twitter.com/en/apps/6268535 App Details
https://what.thedailywtf.com/admin/plugins/sso-twitter
https://developer.twitter.com/en/apps/6268535 Keys and Tokens
Logging in with twiiter:
-
So @PJH invited me to join the TDWTF organization on Twitter's dev thing. Let's try!
Sounds easy enough - I'll just click the button to acce--
Ok, it wants to make sure I'm on the right account, despite the account being explicitly mentioned in the invite email. Whatever. Let's click through and acc--
What the fuck, Twitter?
-
-
@ben_lubar 300 character minimum. Oh, the ironing!
-
Alright, it looks like I'm in. Let's check the team to make sure--
-
Ok, I can't invite @PJH. Let's try leaving the team and accepting the invite agai--
-
Unfortunately, I cannot participate, as sometime since my last post, I got magically associated with Twitter...
-
-
@boomzilla
I see Twitter has hired Jeff for their bot prevention processes.
-
Ok, let's try contacting Twitter support.
Uh, I guess this is kind of a login-related issue. Let's check if that category has anything to do with developers.
I have no idea what's going on here between the fourth and fifth options. Ok, I guess it's related to activating an account?
Ok, none of those really fit. Let's check somewhere else. They seem to have a developer community or something.
Oh. This might be fun.
Well, let's click "log in".
Ok, now you're just teasing me.
Why the hell is email confirmation required if your only supported method of logging in is Twitter and you are a Twitter forum?
Hmm, no message. Let's check over in...
-
-
Holy crap an actual response from a helpful person I DO NOT UNDERSTAND THIS
https://twittercommunity.com/t/merge-or-delete-team-accounts/112415/2?u=ben_lubar
-
@ben_lubar said in Twitter OAuth problem?:
an actual response from a helpful person
Yeah, but he's helping you connect to Twitter. "Helpful."
-
@ben_lubar
Of course, since it's modern day software, what he didn't mention is that the team introduced the bug last week, and they just found it because all of theirQA suckersusers finally started trying to use the new feature.
-
-
@ben_lubar said in Twitter OAuth problem?:
That's already been done - you were simply invited to the app that has already gone through all that...
:/
-
@PJH said in Twitter OAuth problem?:
@ben_lubar said in Twitter OAuth problem?:
That's already been done - you were simply invited to the app that has already gone through all that...
:/
https://twittercommunity.com/t/merge-or-delete-team-accounts/112415/2?u=ben_lubar
-
@ben_lubar Twitter
Working As Designed™then. Gotcha.
-
-
-
-
@PJH said in Twitter OAuth problem?:
@Tsaukpaetra would say in Say my name:
@xas7wcrg9e Sh-as-venn-wic-rog-nie-knee
-
@Tsaukpaetra said in Twitter OAuth problem?:
@Tsaukpaetra would say in Say my name:
@xas7wcrg9e Sh-as-venn-wic-rog-nie-knee
CBA to change the username.
-
@PJH said in Twitter OAuth problem?:
@Tsaukpaetra said in Twitter OAuth problem?:
@Tsaukpaetra would say in Say my name:
@xas7wcrg9e Sh-as-venn-wic-rog-nie-knee
CBA to change the username.
-
@Dreikin accidentally registered a second account here and I deleted it within like fifteen seconds of being told.
Meanwhile:
-
Woo hoo!
Err...now what?
-
-
-
Goddam... Well, apparently automatic account creation thingies work.
Also, WTF?!?!
Also also... Can I delete the @Tsaukpaetra-0 account have it be please?
-
@Tsaukpaetra said in Twitter OAuth problem?:
Also also... Can I delete the @Tsaukpaetra-0 account have it be please?
'tis done.
-
Twitter staff: "we can't remove you from the developer account, but if you create an entirely new twitter account and @PJH invites that one that might work"
Me: "what if I just delete the developer account's only administrator?"
-
By the way, the manually-maintained indexes (
githubid:uid,gplusid:uid,fbid:uid, andtwid:uid) were completely empty for some reason. I fixed them with an extremely simple PostgreSQL query that took a few nanoseconds to run, so I'm not sure why we even need indexes on them at all.
-
-
@Tsaukpaetra said in Twitter OAuth problem?:
@ben_lubar said in Twitter OAuth problem?:
indexes
Does not having them break things?
The idea for phase 2 of the PostgreSQL conversion is to emulate the current NodeBB "database" "structure" through stored procedures that access the actual structured data tables.
I've got most of it ready apart from the stored procedures themselves.
-
Bypass CSRF check. by BenLubar · Pull Request #31 · julianlam/nodebb-plugin-sso-twitter
See inline comment for why this is safe. Fixes #28. Fixes #29. Fixes #30.
I love the code review process NodeBB seems to have:
- Ask what the code does
- Review the response to that question
- Look at the code for the first time
