Failed to authorize using example

[Falci]

Failed to authorize using example

Expected behavior

Twitter should ask to confirm if I want to give access to the app

Actual behavior

Twitter shows an error page:

Steps to reproduce the behavior

Access the URL from:

import "dotenv/config";
import { auth, Client } from "twitter-api-sdk";

const authClient = new auth.OAuth2User({
  client_id: process.env.CLIENT_ID,
  client_secret: process.env.CLIENT_SECRET,
  callback: process.env.CALLBACK_URL,
  scopes: ["tweet.read", "users.read", "offline.access"],
});

const client = new Client(authClient);

const authUrl = authClient.generateAuthURL({
  code_challenge_method: "s256",
});

console.log(authUrl);
// await authClient.requestAccessToken(code);

Brand new twitter account.
Fresh CLIENT_ID and CLIENT_SECRET.
Different from #38, CALLBACK_URL is added to the app's settings:

[risingforce9zz]

I have same issue.

node 18.12.1
typescript 4.9.4

[rojvv]

In the meantime, you can try The oauth2-callback_pkce_plain example.

[Stefanuk12]

I fixed this issue by specifying the state

[ryanmichaelhirst]

@Stefanuk12 can you post an example of your code? I specified the state and am trying to login with window.open(resp.authUrl, '_blank') but I get the same error message as @Falci

[Stefanuk12]

@Stefanuk12 can you post an example of your code? I specified the state and am trying to login with window.open(resp.authUrl, '_blank') but I get the same error message as @Falci

const authUrl = authClient.generateAuthURL({
        code_challenge_method: "s256",
        state: STATE,
})

[ryanmichaelhirst]

Hm I get the error message when specifying s256, but the pcke plain example below does works so I went with that.

  const authUrl = authClient.generateAuthURL({
    state: STATE,
    code_challenge_method: "plain",
    code_challenge: "test",
  });

Thanks for the fast response! @Stefanuk12

[Stefanuk12]

If you're having issues, open Inspect Element > Network and filter for Fetch/XHR. Then look for the authenticate endpoint. In the response, it should tell you the issue.

[RokoTechnology]

make sure your /callback endpoint has res.send or res.redirect at the end or it will time out

app.get('/oa2-redirect', async (req, res)  => {
    const { code } = req.query
    const token = await authClient.requestAccessToken(code)
    res.send({ token })
})

works fine for me even with s256 challenge method