Devise Oauth Twitter: OAuth::Unauthorized Forbidden 403

Question

I am trying to implement Oauth Twitter using Devise.
I have created app on twitter
I have set callback url to: http://localhost:3000
I have added this to config\initializers\devise.rb

  config.omniauth :twitter, "key", "key secret"

Sign in with Twitter automatically appears at this route: /users/sign_up/ But on clicking it I get this error

key and key secret are correct

I also tried deleting and creating new app.

I cannot get it fixed

Help would be greatly appreciated

Here it says that https needs to be setup. So I followed This to set it up. But getting the same error

Patrinapatriot

if I am not wrong your callback url should be like this: http://www.example.com/users/auth/twitter/callback and you may want to mention the same in your twitter app settings. – Sumptuary

Also forbidden usually means you are passing wrong credentials. this tutorial could help you figure out the missing part: sourcey.com/… – Sumptuary

@Sumptuary Updated as you said in twitter app settings but didn't work out – Patrinapatriot

I removed 'config.omniauth :twitter, "key", "key secret"' this line. Instead added to config/initializers/omniauth.rb and that error is gone. But now I am getting 'Not Found. Authentication passthru' – Patrinapatriot

this question here should resolve the issue: #13813344 – Sumptuary

@Sumptuary Thanks for help. The issue was because of the configurations in twitter app settings – Patrinapatriot

Answer 1

Turns out that in twitter app settings Callback URL Lock was set to Yes by default. Switching it to No fixed the error.

Thanks to kubido for helping me out to close the issue on github

Patrinapatriot

Answer 2

You can try to add these in the Callback URLs in https://apps.twitter.com/

• http://localhost:3000/auth/twitter/callback
• http://127.0.0.1:3000/
• http://127.0.0.1:3000/auth/twitter/callback

Worked for me after almost an hour!

I got these URLs after failing the log-in. I checked the request_options. One way to do it is using BetterErrors gem.

Endoparasite

Answer 3

I had been facing the same issue, eventually i fixed it by adding the following callbacks,

http://127.0.0.1:3000/auth/twitter/callback
http://127.0.0.1/
http://127.0.0.1/auth/twitter/callback
http://localhost:3000/auth/twitter/callback

and it worked like a charm,

Endplay

Answer 4

You need set the callback url to: "Your url"/auth/twitter/callback

Syndicate