Take the 2-minute tour ×
Stack Apps is a question and answer site for apps, scripts, and development with the Stack Exchange API. It's 100% free, no registration required.

We experience issues when using the implicit OAuth flow in a WP7 Mango browser control and trying to login with openid. The login process itself works fine (althought the css of the openid page does not get loaded). But the redirection to stack exchange and the app does not work as expected.

We start the OAuth authentication by navigating to

https://stackexchange.com/oauth/dialog?client_id=---clientid---&scope=read_inbox,no_expiry&redirect_uri=https://stackexchange.com/oauth/login_success

The last url the browser control navigates to is

http://stackexchange.com/users/authenticate/?s=49d6f4b1-da9e-49c3-a4cd-d7fa836413c9&dnoa.userSuppliedIdentifier=http://myopenid.com/&openid.assoc_handle={HMAC-SHA1}{4f69b9f9}{QCcvAQ==}&openid.ax.count.alias1=0&openid.ax.count.alias2=1&openid.ax.count.alias3=0&openid.ax.count.alias4=0&openid.ax.mode=fetch_response&openid.ax.type.alias1=http://schema.openid.net/namePerson&openid.ax.type.alias2=http://schema.openid.net/contact/email&openid.ax.type.alias3=http://axschema.org/namePerson&openid.ax.type.alias4=http://axschema.org/contact/email&openid.ax.value.alias2.1=---email---&openid.claimed_id=https://---username---.myopenid.com/&openid.identity=https://---username---.myopenid.com/&openid.mode=id_res&opehttps://stackexchange.com/oauth/dialog?client_id=---clientid---&redirect_uri=https%253a%252f%252fstackexchange.com%252foauth%252flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

---email---, ---username--- and ---clientid--- are placeholders where normally the username etc are placed.

When we restart the app we immediately get an access token so it looks like it has to do with the fact that the user is not yet logged in when this issue appears.

Are we doing something wrong or is this a bug?

share|improve this question
    
I can't reproduce the implicit flow failing on my device, can you duplicate it from a known IP and give me the IP and start/end times involved so I can check our traffic logs? –  Kevin Montrose Mar 22 '12 at 18:41
add comment

You must log in to answer this question.

Browse other questions tagged .