Hi Guys,

I am having a couple of issues with using Authenticate using OAuth and
force_login = true parameter.

Can someone confirm that I am being an idiot? :)

If I am currently logged in to twitter all my requests are authenticated
against that user regardless of the username password combination that I
present to the twitter authentication page.

For example, I am logged into twitter as my PaulKinlan user.  I need to log
in to my application as Twollo, so I go through the normal oauth process,
enter Twollo as the username and the correct password and click Sign in.  My
service recieves the callback and then calls verify_credentials.json,
however even though I know the process I use is correct, the verify
credentials returns the details for PaulKinlan and not Twollo as expected.
It appears to me that the request tokens, access tokens and token secrets
are being created against the logged in user and not the authenticating
user.

If I completly log out of Twitter I can access all the accounts as I would
expect.

Is anyone else seeing this, or is it me?  I could have sworn it was working
ok the other day? Is the expected behaviour.

Paul

Reply via email to