As described by section 6.2.3 in the OAuth standard for 1.0a we must track callback url parameters passed in when retaining a request token.
http://oauth.net/core/1.0a/#rfc.section.6.2.3

This is how it should be implemented.

CommentFileSizeAuthor
#3 add-missing-callback-url-parameter-tracking-2350645-3.patch3.85 KBtimbrandin
#1 add-missing-callback-url-parameter-tracking-2350645.patch466 bytestimbrandin

Comments

timbrandin’s picture

timbrandin commented
StatusFileSize
new add-missing-callback-url-parameter-tracking-2350645.patch466 bytes

Added a solution.

timbrandin’s picture

timbrandin commented
Status: Active » Needs review
timbrandin’s picture

timbrandin commented
StatusFileSize
new add-missing-callback-url-parameter-tracking-2350645-3.patch3.85 KB

Added the correct diff patch.

dxx’s picture

dxx
Primary language French
commented

No problem since two months, tested with Linkedin, Github, Twitter, Google+ and Facebook.

joelpittet’s picture

joelpittet
he/him
Primary language English
Location Vancouver
commented
Status: Needs review » Reviewed & tested by the community

RTBC as per #4

juampynr’s picture

juampynr commented
Status: Reviewed & tested by the community » Fixed

Committed. Thanks!

  • juampynr committed bd37eab on 7.x-3.x authored by timbrandin 
    Issue #2350645 by timbrandin, dxx, joelpittet: Correct OAuth 1.0a...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.