oAuth Authentication flow broken?
Hi again!
I noticed how after receiving my oauth request token, and directing the user to postrank's authentication ( ex: http://www.postrank.com/oauth/authori... ) and when finally user clicks on (Would you like to authorize ABC access your account?) YES.
User gets dumped right into Postrank, instead of receiving a screen offering to go back to where he came from.
Looking at the oAuth Core authentication scheme: http://oauth.net/core/1.0 you can see how right after step C, the idea is sending the user back to the Consumer App.
Testing against Netflix oAuth authorization scheme, for example, right after user approves access to his acount, the only thing he sees is a big button, that reads (something like) "You are done giving access to ABC to your account. Close this window"
Is this something that you have overseen, or is it possible I'm doing something wrong?
cheers,
.m
I noticed how after receiving my oauth request token, and directing the user to postrank's authentication ( ex: http://www.postrank.com/oauth/authori... ) and when finally user clicks on (Would you like to authorize ABC access your account?) YES.
User gets dumped right into Postrank, instead of receiving a screen offering to go back to where he came from.
Looking at the oAuth Core authentication scheme: http://oauth.net/core/1.0 you can see how right after step C, the idea is sending the user back to the Consumer App.
Testing against Netflix oAuth authorization scheme, for example, right after user approves access to his acount, the only thing he sees is a big button, that reads (something like) "You are done giving access to ABC to your account. Close this window"
Is this something that you have overseen, or is it possible I'm doing something wrong?
cheers,
.m
1
person has this question
I have this question, too!
Tell me when someone answers.
The more people who ask this question, the more it gets noticed.
The more people who ask this question, the more it gets noticed.
Create a customer community for your own organization
Plans starting at $19/month
-
Inappropriate?Marumushi, you can set a 'callback' URL (which is the URL the user will be sent to after approving access) when you register your OAuth application on our site. By default, if no URL is provided we redirect the user to our homepage, which is the behavior you're seeing.
Loading Profile...




EMPLOYEE