Cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Am I missing something? redirect_uri & response

ANSWERED

I'd like to set a dynamic redirect_uri to include the current user's ID, but if I send anything that doesn't match the dashboard's URI, I get an error.

 

Beyond that, when I do get a response by exluding the redirect_uri from the post, the response comes back as a url with a hash, not a query string or post. 

 

This is the response I'm getting on the redirect_uri:

 

http://www.url.com/fitness/authorize/1#scope=settings+activity+profile&user_id={user}&token_type=Bearer&expires_in=2569304&access_token={token}

I've tried adding a '?' to see if it will change the value, but it does not. 

 

I see the use mentioned in the RFC at http://tools.ietf.org/html/rfc6749#section-4.2.2, but I guess I'm not sure what I'm supposed to do with the response?

 

I'm using Slim framework for PHP (not my choice). 

 

 EDIT:

I just read this thread and I get that I should be passing the user ID in the state parameter. Makes sense now. 

Best Answer
0 Votes
1 BEST ANSWER

Accepted Solutions

The Implicit Grant Flow (meants for browser and client-based apps) uses the URL fragment (#). Browsers do not send URL fragments to the server.

 

Web server apps should use the Authorization Code Grant Flow to get a redirect with URL parameters.

View best answer in original post

Best Answer
0 Votes
2 REPLIES 2

The Implicit Grant Flow (meants for browser and client-based apps) uses the URL fragment (#). Browsers do not send URL fragments to the server.

 

Web server apps should use the Authorization Code Grant Flow to get a redirect with URL parameters.

Best Answer
0 Votes

And now that I read the response_type required values closer, I finally get it.

 

Thank you.

Best Answer