Ō̴̡̨͍͕̠̹̘͖͓̭̝̰̖͉̬̫͍̝̰̟͖͖̞͇̟̻̫͇̠̯̋̋̂ͅͅA̷̡̧͎̫̬͖̠͍̼̗̠͊̉̏̓̈́̂̀̈́͆͘͜uth @oktadev oauth.wtf oauth.net 🎥 livestreaming youtube.com/aaronpk aaronpk.tv 💛 #indieweb 🐘🦋
Portland, Oregon
Joined April 2008
- Tweets 11,388
- Following 1,223
- Followers 6,415
- Likes 9,609
What URL are you sending people back to to have Apple deliver the authorization code to? That's the redirect URL, and you have to have configured it in the request and in the developer console anyway too.
I remembered why `redirect_uri` is optional in their docs 😂
They document both the auth code and refresh token request with the same list. You don't send the `redirect_uri` when using a refresh token, hence it's an optional parameter.
Ok I was curious so I tested myself. I get the `invalid_grant` error unless I include the `redirect_uri` in the POST request with the authorization code.
1
Last night at the #oredev speaker dinner I got to participate in either an old Swedish tradition or an elaborate prank they play on foreigners: alternating between the sauna and jumping into the Baltic Sea three times.
Either way it was a fun experience. 😆
1
17
Make sure to include exactly the claims in their docs. I was finding some JWT libraries would add their own stuff into it or change things around slightly. Probably easiest to verify by base64 decoding the claims after you generate it.
1
Huh I missed that in their docs. My next guess is your client secret JWT isn't being generated properly. Try generating it with the Ruby code in my post, it's very picky.
1
Why do you say you don't need a redirect_uri? That's probably the problem if you're not including it.
1
Video is up and slides are linked from there! youtube.com/watch?v=xSDeToCy…
1
1
Slides from my "How to Hack OAuth" talk at #oredev are up!
speakerdeck.com/aaronpk/how-…
Thanks everyone for coming to watch and I hope you got something out of it! I'll post again when the video is out!
1
3
24
They pushed out some changes a little bit ago and I have been able to exchange the authorization code and get the user info now! I updated my post so maybe take a look through it again. developer.okta.com/blog/2019…
1
1
what the... this is literally something I dreamed about being able to do 20 years ago and never in a million years thought computers would be able to come close
8
Are you editing videos on it too?? That's the one thing I haven't found easier on the iPad. I do prefer it for editing in Lightroom now tho!
Trying to use emoji in my slides and I have some questions:
1) why is there no "window" emoji
2) why is there a floor lamp in the couch 🛋 emoji
3) why is there only a lightbulb 💡 on, but not off
2
3
10
It's definitely mentioned as optional on the "Getting Started" page if that's what you were looking at. But in general you should also think of everything on the wiki as optional, because after all it's your website!
1