Implicit grant flow OAuth broken for some users

Since yesterday, some users of my app have reported that they’re no longer able to link their Twitch account. I’m using the implicit grant OAuth flow.

This only seems to affect a small number of people and I can’t reproduce it on my side. When they authenticate, they should be redirected to http://localhost:9696/auth? (my redirect_uri), but apparently they are incorrectly redirected to https://id.twitch.tv/oauth2/'

This is what their redirect page looks like:

<!DOCTYPE html>
<html lang="en">
<title>Twitch - Redirect Application</title>
<head>
    <meta http-equiv="refresh" content="0;URL=''" />
</head>
<body>
    <script>
        function redirectPage() {
            window.location = "";
        }
    </script>
    Redirecting you automatically, click <a href="#" onclick="redirectPage()">here</a> if your browser does not redirect you.
</body>
</html>

Let me know if you need any more info.

Cheers,
Denchi

This was just filed as oAuth is redirecting to not the right place or failing all together for some users · Issue #685 · twitchdev/issues · GitHub as I have reports of this

To comfirm you are just using regular implicit auth? Not OIDC auth

Just regular implicit flow OAuth.

Just wanted to check.

I have the same issue on some users, but all my auth is generally regular OIDC

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.