Conversation

Notices

1. codesections (codesections)'s status on Sunday, 09-Sep-2018 14:13:59 UTC codesections

   #mastodev

   If anyone has a moment to hop on the #mastodon IRC channel and help me figure out what I'm doing wrong in requesting a oauth token for the mastodon app I'm working on, I'd greatly appreciate it. I've triple-checked my code and cannot figure out why I'm getting "invalid_grant" errors when I request a token with the client_id, client_secret and authorization_code I've just finished requesting.

   I'm sure I'm doing something simple wrong, but I'm not seeing it!

   • codesections (codesections)'s status on Sunday, 09-Sep-2018 14:38:53 UTC codesections

     in reply to

     Since y'all are being helpful on here, here is the link to my *very* short/simple attempt at oauth. It's only 80 SLOC and I'm genuinely perplexed about where the bug is hiding.

     https://github.com/codesections/t5/blob/master/get_favs.js

   • codesections (codesections)'s status on Sunday, 09-Sep-2018 15:42:16 UTC codesections

     in reply to

     • Nolan
     • GCU Prosthetic Conscience 🍞

     I'm still really struggling to debug my #Mastodon oauth #JavaScript code. I've cut the non-essential bits—it's now down to 74 SLOC; it seems like I'm requesting a token in exactly the way the docs describe.

     If anyone can offer a tip, I'd really appreciate it!

     code: https://github.com/codesections/t5/blob/master/get_favs.js
     Live demo: https://distracted-lovelace-530204.netlify.com

     @gcupc @nolan I hate to bother y'all with this, but I was modeling the oauth flow on #pinafore/#brutaldon, so I know y'all could help me with this if you have a second.

   • codesections (codesections)'s status on Sunday, 09-Sep-2018 19:25:41 UTC codesections

     in reply to

     • Nolan
     • GCU Prosthetic Conscience 🍞
     • Luca Hammer

     @gcupc @nolan

     Ok, issue resolved. Thanks for your help, everyone!

     (The issue turned out to be that you need to include a matching redirect_uri in the final step of the oauth dance *even* if you don't need the user to be redirected at that step. The docs (https://github.com/tootsuite/documentation/blob/master/Using-the-API/OAuth-details.md) had mislead me into thinking that the redirect_uri should be 'urn:ietf:wg:oauth:2.0:oob' at that last step to indicate no further redirection is needed.)

     CC @Luca