Stuck with OAuth but getting somewhere

[scripting]

What I need is code that works that connects to an app as defined on the Mastodon server. I want to be able to post to the user's account.

I've already created an app on Scott's server. I have the following info:

{
"clientKey": "xxx",
"clientSecret": "xxx",
"myAccessToken": "xxx",
"urlMastodonServer": "http://social.scottfr.ee/",
"urlRedirect": "http://social.rss.land/callbackFromMastodon"
 }

I am using some of what I know from working with Twitter here, that once the user has authorized the app, the Mastodon server needs to know where to redirect to with the accessToken for the user.

I just don't know the names of the routines, and ideally I'd have a little example I could crib from.

But I've been wandering around for the last hour, so it's time to put it down for now.

If anyone here has any code I can use that would be much appreciated.

[dariusk]

Here is my pull request for implementing OAuth verification on my rss-to-activitypub converter. All the endpoints and handshakes you need should be in there: dariusk/rss-to-activitypub@34b46ed

[fasiha]

Here's my recent TypeScript/JavaScript glue code doing this with the very nice Megalodon wrapper doing all the hard work of doing network calls and handling errors for me:

• step 1: register the app, get the client key and secret, and send the user to the Mastodon server for authorization (which you've already done): https://github.com/fasiha/yoyogi/blob/507b066b959d272e8db36909f7983ced94ac3e83/components/components.tsx#L126-L138
• step 2: when Mastodon sends the user back to your server with a code as a query parameter, exchange that for a token: https://github.com/fasiha/yoyogi/blob/507b066b959d272e8db36909f7983ced94ac3e83/components/components.tsx#L161-L167

I totally realize I may be rehashing things you already know ("preaching Buddhism to the Buddha" as the Japanese say 🙇) but I don't thiiiiink there's ever a step where you send clientKey/secret and the token? The token is what you get at the end of the registration process and use that in future requests, so I'm having a hard time understanding what endpoint you're trying to hit with that payload?

Another mini-tip might be, if you're having problems with getting the code in the query parameter in the callback URL, an easier initial prototype might be to just use the out-of-band approach: per https://docs.joinmastodon.org/methods/apps/ you can give urn:ietf:wg:oauth:2.0:oob as the redirect_uris, and the Mastodon server will just give the user the token that they copy and can paste back into your app. I did that initially and got that working, before doing the seamless non-OOB (in-band?) approach using the callback URL.

Does this remotely help? If not, my apologies 😓!

[scripting]

Four days later and I'm still trying to get Hello World to work.

Here's the status report.

#4 (comment)

Help much appreciated.