[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread Bill Kocik


I've seen this same (I believe) bug manifested in different ways, and
it's come up on this list before. Twitter are apparently storing some
sort of return_to URL or similar in your session, and sending you to
it at inopportune times.

A great way to see it in action is to click on the Block this user
link when you get a new follower email; after confirming the block,
you wind up at some random page you visited in the past (well, not
completely random, it'll generally be the most recent page you visited
besides the block page).


On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter


[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread test test

+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html


[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread victor castleton

I don't know whether or no it will help, but I will try it any way. Thanks

-Original Message-
From: twitter-development-talk@googlegroups.com
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of test test
Sent: Wednesday, July 15, 2009 9:51 PM
To: twitter-development-talk@googlegroups.com
Subject: [twitter-dev] Re: OAuth related bug with signature Woah there!


+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html



[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread victor castleton



-Original Message-
From: twitter-development-talk@googlegroups.com
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of test test
Sent: Wednesday, July 15, 2009 9:51 PM
To: twitter-development-talk@googlegroups.com
Subject: [twitter-dev] Re: OAuth related bug with signature Woah there!


+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html



[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread victor castleton



-Original Message-
From: twitter-development-talk@googlegroups.com
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of test test
Sent: Wednesday, July 15, 2009 9:51 PM
To: twitter-development-talk@googlegroups.com
Subject: [twitter-dev] Re: OAuth related bug with signature Woah there!


+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html



[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread victor castleton



-Original Message-
From: twitter-development-talk@googlegroups.com
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of test test
Sent: Wednesday, July 15, 2009 9:51 PM
To: twitter-development-talk@googlegroups.com
Subject: [twitter-dev] Re: OAuth related bug with signature Woah there!


+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html



[twitter-dev] Re: OAuth related bug with signature Woah there!

2009-07-15 Thread victor castleton



-Original Message-
From: twitter-development-talk@googlegroups.com
[mailto:twitter-development-t...@googlegroups.com] On Behalf Of test test
Sent: Wednesday, July 15, 2009 9:51 PM
To: twitter-development-talk@googlegroups.com
Subject: [twitter-dev] Re: OAuth related bug with signature Woah there!


+1 Even I keep hitting this issue.Hope twitter guys make oauth
registration solid.

On Wed, Jul 15, 2009 at 8:48 AM, Bill Kocikbko...@gmail.com wrote:


 I've seen this same (I believe) bug manifested in different ways, and
 it's come up on this list before. Twitter are apparently storing some
 sort of return_to URL or similar in your session, and sending you to
 it at inopportune times.

 A great way to see it in action is to click on the Block this user
 link when you get a new follower email; after confirming the block,
 you wind up at some random page you visited in the past (well, not
 completely random, it'll generally be the most recent page you visited
 besides the block page).


 On Jul 15, 9:52 am, Scott Carter scarter28m-goo...@yahoo.com wrote:
 I believe that I have discovered a reproducible OAuth related bug.

 1. Sign out of your Twitter account (from Twitter.com).
 2. Authenticate an app using OAuth (haven't tried authorize flow with
 this issue).
 3. Go to Twitter.com and login to a different account than used in
 step 2.

 I see the message:

 Woah there!

 This page requires some information that was not provided. Please
 return to the site that sent you to this page and try again … it was
 probably an honest mistake.

 with the page URL showing:  https://twitter.com/oauth/authenticate

 When I revisit twitter.com, I am logged into the account from step 3.

 - Scott
 @scott_carter



-- 

Spike Milligan  - All I ask is the chance to prove that money can't
make me happy. -
http://www.brainyquote.com/quotes/authors/s/spike_milligan.html