Skip to main content
Stack Apps

Return to Question

Commonmark migration
Source Link
Community Bot
Community Bot
  • 1

Here is the URL I am trying to use:

https://stackexchange.com/oauth/dialog?client_id=120&scope=read_inbox,no_expiry&redirect_uri=https://stackexchange.com/oauth/login_success

This works perfectly when the user is logged in but when a user is not logged in, the following happens:

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https://stackexchange.com/oauth/login_success&scope=read_inbox,no_expiry&response_type=token&state=&returnurl=/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

https://stackexchange.com/oauth/https://stackexchange.com/oauth/login_success#error=access_denied&error_description=user+denied+this+authentication+request

What am I doing wrong?

Here is the URL I am trying to use:

https://stackexchange.com/oauth/dialog?client_id=120&scope=read_inbox,no_expiry&redirect_uri=https://stackexchange.com/oauth/login_success

This works perfectly when the user is logged in but when a user is not logged in, the following happens:

  • A redirect to this page occurs:

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https://stackexchange.com/oauth/login_success&scope=read_inbox,no_expiry&response_type=token&state=&returnurl=/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

  • After logging in to an OpenID provider, this page is displayed:

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

  • Clicking "reject" leads to this non-existent page:

https://stackexchange.com/oauth/https://stackexchange.com/oauth/login_success#error=access_denied&error_description=user+denied+this+authentication+request

What am I doing wrong?

Here is the URL I am trying to use:

https://stackexchange.com/oauth/dialog?client_id=120&scope=read_inbox,no_expiry&redirect_uri=https://stackexchange.com/oauth/login_success

This works perfectly when the user is logged in but when a user is not logged in, the following happens:

What am I doing wrong?

edited tags
Link
Kevin Montrose
Kevin Montrose
  • 18.7k
  • 6
  • 35
  • 62
Source Link
Nathan Osman
Nathan Osman
  • 23.3k
  • 11
  • 61
  • 107

Implicit OAuth flow is not working when the user is not logged in.

Here is the URL I am trying to use:

https://stackexchange.com/oauth/dialog?client_id=120&scope=read_inbox,no_expiry&redirect_uri=https://stackexchange.com/oauth/login_success

This works perfectly when the user is logged in but when a user is not logged in, the following happens:

  • A redirect to this page occurs:

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https://stackexchange.com/oauth/login_success&scope=read_inbox,no_expiry&response_type=token&state=&returnurl=/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

  • After logging in to an OpenID provider, this page is displayed:

https://stackexchange.com/oauth/dialog?client_id=120&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=read_inbox,no_expiry&response_type=token&state=

  • Clicking "reject" leads to this non-existent page:

https://stackexchange.com/oauth/https://stackexchange.com/oauth/login_success#error=access_denied&error_description=user+denied+this+authentication+request

What am I doing wrong?