question

Theneeds Inc. avatar image
Theneeds Inc. asked

Authentication via Twitter and Linkedin

Our website, Theneeds.com, supports authentication via Google, Facebook, Twitter and Linkedin. I created a manifest specifying auth permission and I can successfully open Theneeds, Google and Facebook login pages. On Twitter and Linkedin, however, I receive the error "The requested URL: will be open in a mobile browser." The auth urls I'm using are: https://twitter.com/oauth/authenticate?... https://www.linkedin.com/uas/oauth/authenticate?... Is there a list of the allowed urls and/or a way to add these two? Best, Emanuele
iap
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Theneeds Inc. avatar image
Theneeds Inc. answered
Update: actually also Facebook isn't properly working. The first window opens, but after entering username+password an error message appears: "The requested URL: https://m.facebook.com/checkpoint/?... will open in a mobile browser". I'd attach screenshots, but it seems I'm not allowed. Best,
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Sujoy@Amazon avatar image
Sujoy@Amazon answered
Hi Ecesena, Thank you for writing to us. Currently these OAuth providers are supported in our Web App environment officially : Google, Facebook, Twitter and Yahoo I am checking with internal appropriate team here whether Linkedin is supported or not and why m.facebook.com is redirected in Silk. I will getback to you shortly on these. But meanwhile I have two points to share with. 1. Is Twitter auth url correct in manifest? Should not it be https://api.twitter.com/oauth/authorize Ref : https://dev.twitter.com/docs/api/1/get/oauth/authorize 2. Is Linkedin auth url correct? Should not it be https://www.linkedin.com/uas/oauth2/authorization Ref : https://developer.linkedin.com/documents/authentication
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Theneeds Inc. avatar image
Theneeds Inc. answered
Hi, thank you for the response. In my first message I wrote the links that are causing me problems. For Twitter, it's /authenticate, not authorize, which is preferred as the user is not always prompted for the authorization form. Similarly for Linkedin we use /authenticate. Moreover, we're still using oath and not oauth2 for Linkedin. Please let me know if these settings are ok and/or can be further whitelisted. Best, Emanuele
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Theneeds Inc. avatar image
Theneeds Inc. answered
Hi again, sorry but I just realized that you mentioned the manifest. I couldn't find in the docs a parameter to manually specify whitelisted urls. My manifest (below) only contains permission "auth". Is there anything else I should do? { "verification_key": "MY_VERIF_KEY", "launch_path": "?utm_source=amazon", "permissions": [ "auth" ], "type": "web", "version": "1.0.0", "last_update": "2014-01-30 15:30:00-0800", }
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Sujoy@Amazon avatar image
Sujoy@Amazon answered
Hi Ecesena, Sorry for my last post. We can not whitelist any url through manifest. The present URLs we allow for Twitter are: " http://api.twitter.com/oauth/authenticate" " https://api.twitter.com/oauth/authenticate" " https://api.twitter.com/oauth/authorize" Facebook: " https://www.facebook.com/dialog/oauth" " https://m.facebook.com/dialog/oauth" " http://m.facebook.com/login.php" " http://www.facebook.com/login.php" " https://m.facebook.com/login.php" " https://www.facebook.com/login.php" " https://m.facebook.com/dialog/permissions.request" " https://www.facebook.com/dialog/permissions.request" " https://graph.facebook.com/oauth/authorize" (All URLs are prefixes, anything starting with these URLs will be allowed) We presently don't support LinkedIn at this point. I am going to raise it to appropriate team so that it would be supported near future. I just tried the FB login and this seems to work just fine. From what I can tell from a bit of digging on the provided URL https://m.facebook.com/checkpoint/ is that this isn't part of the FB auth process, but rather a normal Facebook newsfeed page (incidentally this was confirming my mobil number). This isn't the experience I got when logging on with my own account which worked without any errors or being thrown to Silk. While looking at your app, I saw that web url is not updated there. Can you please update it? So that I can check the flow from my end.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Theneeds Inc. avatar image
Theneeds Inc. answered
Hi! I think both Twitter and Facebook are fixed. For Twitter, I was using https://twitter.com, instead of https://api.twitter.com. For Facebook... no idea, but I no longer receive the error. Perhaps Facebook was temporarily doing a wrong redirect (in fact in my first tests it was working, then it stopped, now it's working again). As you mentioned, that m.facebook.com/checkpoint is not common. I will turn Linkedin off then. If you'd like to crosscheck, this is the url: http://www.theneeds.com/?utm_source=amazon (please note that the Twitter fix will be online after 10pm PDT, i.e. in about 12 hours) Thanks for the support! Emanuele
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Sujoy@Amazon avatar image
Sujoy@Amazon answered
LinkedIn is supported now.
10 |5000

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.