Twitter login not working

[alechamed]

Twitter change the callback policy, now when I try to login my callback "oauth/complete/twitter/" not work and twitter return error 403:

`

Request Method:	GET
https://homely-dev.herokuapp.com/en/oauth/login/twitter/
1.11.10
HTTPError
403 Client Error: Forbidden for url: https://api.twitter.com/oauth/request_token
/app/.heroku/python/lib/python2.7/site-packages/requests/models.py in raise_for_status, line 935
/app/.heroku/python/bin/python
2.7.14
['/app', '/app/.heroku/python/bin', '/app', '/app/.heroku/python/lib/python27.zip', '/app/.heroku/python/lib/python2.7', '/app/.heroku/python/lib/python2.7/plat-linux2', '/app/.heroku/python/lib/python2.7/lib-tk', '/app/.heroku/python/lib/python2.7/lib-old', '/app/.heroku/python/lib/python2.7/lib-dynload', '/app/.heroku/python/lib/python2.7/site-packages']
Wed, 13 Jun 2018 12:14:52 +0200

`

[matthewdeanmartin]

I'm getting same, haven't solved, but maybe related to this- python-social-auth/social-core#249

Twitter now requiring a valid call back URL & maybe didn't before June 12

[DavidToca]

I had the same issue and I did solve it by adding

https://mydomain.com/complete/twitter/

to the valid callback url on the twitter app config at https://apps.twitter.com/

[kaleissin]

I've tried the same but no luck, still get the same error.

[megavenik]

@DavidToca hi! could you please tell us, where exactly in your project did you configured the callback url for twitter and how? Thanks a lot!

[pydolan]

If @DavidToca's solution isn't working for you, double check that your URL matches exactly what it used. For instance, have "http" or "https" correct, and whether "www" is there or not.

[johnclaro]

I had this issue and updated my app settings to have something like these. Note the forward slashes

http://mydomain.com/complete/twitter/
http://www.mydomain.com/complete/twitter/

You can update the app settings in https://apps.twitter.com

[gera-rivero]

Same issue, changes made but without luck, i still have the 403 Client Error. Is there some other workaround?

[kiruto]

Twitter has used the white list since a week ago.
So if you engaged this problem, you may update your callback url (here)[https://apps.twitter.com/].

[henpin]

I had the same issue and I have resolved by adding callback urls like

http://localhost:8000/auth/complete/twitter/

i had set "auth" to urls.py for login.

[saa14]

Has anyone come up with a solution other than the ones mentioned above?

[arjunthakur08]

Upgrade the following packages to the latest version using pip:

social-auth-app-django
social-auth-core

Steps to follow:

1. Login to you Twitter account
2. Go to https://apps.twitter.com/, and select your application.
3. Select the Settings Tab in the application to configure the Callback URL
4. In the Callback URLs input box, add the following according to the nature of request made:
If it is http, without SSL certificate, then add the following:

http://example.com/complete/twitter/
or
http://www.example.com/complete/twitter/

If it is https i.e. it supports SSL certificate (recommended), then add the following:

https://example.com/complete/twitter/
or
https://www.example.com/complete/twiiter/

Note:
1. Make sure the slash( / ) after the twitter is there in the Callback URLs input box
2. Also, replace "example.com" or "www.example.com" with your domain name.

[monomoti]

The solution above (adding correct callback to the white list) should work.
But for me, It didn't work until I found that both "Consumer Key (API Key)" and "Consumer Secret (API Secret)" had been changed. I don't know why.
So I strongly recommend you to make sure your key and secret are correct.

[herawais]

The solution above (adding correct callback to the white list) should work.
But for me, It didn't work until I found that both "Consumer Key (API Key)" and "Consumer Secret (API Secret)" had been changed. I don't know why.
So I strongly recommend you to make sure your key and secret are correct.

Exactly. Thanks a lot

[alejandro-zapeta]

Upgrade the following packages to the latest version using pip:

social-auth-app-django
social-auth-core

Steps to follow:

1. Login to you Twitter account
2. Go to https://apps.twitter.com/, and select your application.
3. Select the Settings Tab in the application to configure the Callback URL
4. In the Callback URLs input box, add the following according to the nature of request made:
If it is http, without SSL certificate, then add the following:

http://example.com/complete/twitter/
or
http://www.example.com/complete/twitter/

If it is https i.e. it supports SSL certificate (recommended), then add the following:

https://example.com/complete/twitter/
or
https://www.example.com/complete/twiiter/

Note:
1. Make sure the slash( / ) after the twitter is there in the Callback URLs input box
2. Also, replace "example.com" or "www.example.com" with your domain name.

For me these works. I put 3 references in that box. and be careful with the last slash.

[TomaszKot11]

I needed to make sure I have '/' after the whole callback URL 😄

[hardik-dadhich]

Hi @henpin , Does http://localhost:8000/auth/complete/twitter/ works for you?
because I am using these callbacks but none of them is working!!
Callback URL

http://localhost:8000/oauth/complete/twitter/
http://localhost:8000/auth/complete/twitter/
http://localhost:8000/oauth/login/twitter/

Can you tell me where I am doing wrong?
I am using django-social-auth.

[alejandro-zapeta]

Twitter its working fine for me... or let me check [image: image.png] Yes, seems it's working fine

…

On Fri, May 29, 2020 at 9:45 AM HARDIK DADHICH ***@***.***> wrote: Hi @henpin <https://github.com/henpin> , Does http://localhost:8000/auth/complete/twitter/ works for you? because I am using these callbacks but none of them is working!! Callback URL http://localhost:8000/oauth/complete/twitter/http://localhost:8000/auth/complete/twitter/http://localhost:8000/oauth/login/twitter/ Can you tell me where I am doing wrong? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#164 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAQTR7W2STJXRGYQOC23MFTRT7KAXANCNFSM4FEXVU7Q> .

-- -- Juan Alejandro Zapeta Perez

[ghost]

The above redirect urls seems to be not working but the below ones did

https://mysite.com:8000/social-authcomplete/facebook/
https://mysite.com:8000/social-authcomplete/twitter/

[Kolaposki]

If you're running on localhost and you still get the error. Make sure the port you're running on matches the port you presented on Twitter CALLBACK URLS

Example
I'm running on port 9900 so this worked for me
http://127.0.0.1:9900/oauth/complete/twitter/

instead of
http://localhost:8000/oauth/complete/twitter/ or http://localhost:9900/oauth/complete/twitter/

[dharmendra-kotarya]

for social-auth-app-django
https://your_domain_name/social/complete/twitter/
it worked

[anjayluh]

I had this issue and updated my app settings to have something like these. Note the forward slashes

http://mydomain.com/complete/twitter/
http://www.mydomain.com/complete/twitter/

You can update the app settings in https://apps.twitter.com

Took me a night and a day to finally find this solution, thank you

[itod]

I was seeing this issue with one user (but not all) in production (not on a dev/localhost box). This fixed it: Tell the user to go to their Twitter settings and revoke your app's access (currently under: Settings > Security & Account Access > Apps & Sessions > Connected Apps). Then return to your site/app and login again. Worked.