Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

New answers tagged


I don't think that's a bug, for implicit OAuth. Anyway, if I understand RFC 6749 correctly, that is not how you are supposed to do such extra checks. Use the state parameter. And this works. For example, a call to:   /oauth/dialog?...&state=robfoo&redirect_uri= (Click the link and try it.) Yields ...


This appears to have been silently fixed, sometime in the last year. Now, both:,write_access,private_info&redirect_uri= (commas) And:

Top 50 recent answers are included