11-05-2015 15:29 - edited 11-05-2015 15:31
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-05-2015 15:29 - edited 11-05-2015 15:31
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
I'd like to set a dynamic redirect_uri to include the current user's ID, but if I send anything that doesn't match the dashboard's URI, I get an error.
Beyond that, when I do get a response by exluding the redirect_uri from the post, the response comes back as a url with a hash, not a query string or post.
This is the response I'm getting on the redirect_uri:
http://www.url.com/fitness/authorize/1#scope=settings+activity+profile&user_id={user}&token_type=Bearer&expires_in=2569304&access_token={token}
I've tried adding a '?' to see if it will change the value, but it does not.
I see the use mentioned in the RFC at http://tools.ietf.org/html/rfc6749#section-4.2.2, but I guess I'm not sure what I'm supposed to do with the response?
I'm using Slim framework for PHP (not my choice).
EDIT:
I just read this thread and I get that I should be passing the user ID in the state parameter. Makes sense now.
Answered! Go to the Best Answer.
Accepted Solutions
11-05-2015 15:44
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post



11-05-2015 15:44
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
The Implicit Grant Flow (meants for browser and client-based apps) uses the URL fragment (#). Browsers do not send URL fragments to the server.
Web server apps should use the Authorization Code Grant Flow to get a redirect with URL parameters.

11-05-2015 15:44
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post



11-05-2015 15:44
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
The Implicit Grant Flow (meants for browser and client-based apps) uses the URL fragment (#). Browsers do not send URL fragments to the server.
Web server apps should use the Authorization Code Grant Flow to get a redirect with URL parameters.

11-06-2015 07:55
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post

11-06-2015 07:55
- Mark as New
- Bookmark
- Subscribe
- Permalink
- Report this post
- Who Voted for this post?
And now that I read the response_type required values closer, I finally get it.
Thank you.
