This is the URL that I'm entering (in Safari, cleared website data and cache; my app, uses own Cookie jar; and incognito chrome) https://stackexchange.com/oauth/dialog?client_id=23&scope=read_inbox&redirect_uri=https://stackexchange.com/oauth/login_success
This is the URL of the page that appears (the address changes in the address bar, but it looks like it's the only page visited)
This means I get stuck on the authorising page, (or occasionally is says "You're now being returned to the app")
This only happens if the user is not logged in. If the user is logged in, authorisation flys through like it should.
I think this is a variation of this question: Implicit OAuth flow is not working when the user is not logged in.
Or maybe identical. One of the users of my app had this problem though it seemed to have cleared. I've tried different browsers and clearing cache, but the same problem occurs.
redirect_uriboth times, a
returnurlis being added in the second case.
returnurlbeing set is an implementation detail relating to allowing anonymous users to login as part of approving an app. The link in your comment is just to a "please approve this app" page, which seems correct to me?