Sign in with Twitter: Everytime authorization

[Jan-M-B]

Hi,

currently I am testing the twitter-redirect.html example, but I have a problem.
Compared to the google login, everytime when I want to sign in with twitter, twitter asks me to authorize the app, is this normal? Google asks me just one time ...

Jan

[bojeil-google]

Hey Jan, it's quite normal for that to happen.

[Jan-M-B]

Ok thanks.

do we have the opportunity to change this, because I think it's quite annoying for the user ....

Jan

[nicolasgarnier]

That's weird because Twitter's docs say specifically that the behavior should be like Google's:

In the case where the user is already signed in to twitter.com and has granted access to the website, this redirect happens immediately.

From: https://dev.twitter.com/web/sign-in/desktop-browser

@Jan-M-B Could you upload a version of your app online (using firebase deploy) so we could replicate this behavior?

[Jan-M-B]

Hi,
I have sent you the link to the App via mail to nivco@google.com

Jan

[nicolasgarnier]

Thanks @Jan-M-B
I can confirm the behavior that user are being re-asked to authrotize every time.

I think I've found what the issue is:

When asking for auth we're using the URL https://api.twitter.com/oauth/authorize?oauth_token=... and with this URL the user is asked to click through every time.

There is another URL for authentication only: https://api.twitter.com/oauth/authenticate?oauth_token=... and this one will automatically redirect on subsequent auth.

We'll investigate internally if we can use the latter instead of .../authorize it may depends if it supports adding additional scopes for instance.

@bojeil-google I'll file a bug internally about this.

[Thaina]

Hello. Are there any progress on this yet?

[nicolasgarnier]

Not yet, I'm asking the team in charge of this change for news.

[nicolasgarnier]

This is now fixed. Please make sure you enable the option:

In your Twitter app Settings for this to work!