开发者

Twitter/Facebook OAuth hiding token in URL

开发者 https://www.devze.com 2023-03-27 13:31 出处:网络
When my users use Twitter or FB Connect I do开发者_如何学Cn\'t want the OAuth token show up in the callback URL like so:

When my users use Twitter or FB Connect I do开发者_如何学Cn't want the OAuth token show up in the callback URL like so:

http://mysite.com/signup?state=5cf2199d5949568a264561f9b4b2d2b8&code=AQBQwuHD6F6ugE9vVUiB_4fHH4C3LGMUHYFyo51TQ9QrIHUavO9XxySUbUvunBECejf47gomxUS4gb6RdCFh4vS3BLy9UPY7kYSyZCN_DKytsymxIXISvznhj_GymeqzlTtBlIj7KZjipcjQjaxLJYyTL_3snBKxc2x72uc5WNvEk7WHbci4FkX03QGGGRlxJtw

I would like to hide those variables so it can just be http://mysite.com/signup like, for instance, http://lockerz.com/ does with their OAuth process. Anybody have any ideas?


Ok, the way I did this was having a landing page to work as my callback, meaning that I redirect to a page that is not the one the user started at before redirecting to the actual page.

In this page I set the variables I need so the next page can work properly and even be refreshed and not getting Twitter or FB Auth errors due to already expired tokens

0

精彩评论

暂无评论...
验证码 换一张
取 消