When my users use Twitter or FB Connect I do开发者_如何学Cn't want the OAuth token show up in the callback URL like so:
http://mysite.com/signup?state=5cf2199d5949568a264561f9b4b2d2b8&code=AQBQwuHD6F6ugE9vVUiB_4fHH4C3LGMUHYFyo51TQ9QrIHUavO9XxySUbUvunBECejf47gomxUS4gb6RdCFh4vS3BLy9UPY7kYSyZCN_DKytsymxIXISvznhj_GymeqzlTtBlIj7KZjipcjQjaxLJYyTL_3snBKxc2x72uc5WNvEk7WHbci4FkX03QGGGRlxJtw
I would like to hide those variables so it can just be http://mysite.com/signup
like, for instance, http://lockerz.com/ does with their OAuth process. Anybody have any ideas?
Ok, the way I did this was having a landing page to work as my callback, meaning that I redirect to a page that is not the one the user started at before redirecting to the actual page.
In this page I set the variables I need so the next page can work properly and even be refreshed and not getting Twitter or FB Auth errors due to already expired tokens
精彩评论