exclude oauth_verifier from the body

abraham · May 2, 2017 · 4703dde · 4703dde
1 parent a3df975
commit 4703dde
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/TwitterOAuth.php b/src/TwitterOAuth.php
@@ -347,6 +347,11 @@ private function oAuthRequest($url, $method, array $parameters)
         if ($this->bearer === null) {
             $request->signRequest($this->signatureMethod, $this->consumer, $this->token);
             $authorization = $request->toHeader();
+            if (array_key_exists('oauth_verifier', $parameters)) {
+                // Twitter doesn't always work with oauth in the body and in the header
+                // and it's already included in the $authorization header
+                unset($parameters['oauth_verifier']);
+            }
         } else {
             $authorization = 'Authorization: Bearer ' . $this->bearer;
         }