python - Flask CORS - no Access-control-allow-origin header present on a redirect() -

-

i implementing oauth twitter user-sign in (flask api , angular)

i keep getting following error when click sign in twitter button , pop window opens:

xmlhttprequest cannot load https://api.twitter.com/oauth/authenticate?oauth_token=r-eufwaaaaaagjsmaaabtp8vcie. no 'access-control-allow-origin' header present on requested resource. origin 'null' therefore not allowed access.

i using python-cors packages handle cors, , have instagram sign in working correctly. believe has response being redirect have not been able correct problem.

my flask code looks this:

app = flask(__name__, static_url_path='', static_folder=client_path) cors = cors(app, allow_headers='content-type', cors_send_wildcard=true) app.config.from_object('config')  @app.route('/auth/twitter', methods=['post','options']) @cross_origin(origins='*', send_wildcard=true) #@crossdomain(origin='') def twitter():     request_token_url = 'https://api.twitter.com/oauth/request_token'     access_token_url = 'https://api.twitter.com/oauth/access_token'     authenticate_url = 'https://api.twitter.com/oauth/authenticate'      # print request.headers      if request.args.get('oauth_token') , request.args.get('oauth_verifier'):         -- omitted brevity --     else:         oauth = oauth1(app.config['twitter_consumer_key'],                        client_secret=app.config['twitter_consumer_secret'],                        callback_uri=app.config['twitter_callback_url'])         r = requests.post(request_token_url, auth=oauth)         oauth_token = dict(parse_qsl(r.text))         qs = urlencode(dict(oauth_token=oauth_token['oauth_token']))         return redirect(authenticate_url + '?' + qs)

the problem not yours. client-side application sending requests twitter, isn't need support cors, twitter. twitter api not support cors, means cannot talk directly browser.

a common practice avoid problem have client-side app send authentication requests server of own (such same flask application have), , in turn server connects twitter api. since server side isn't bound cors requirements there no problem.

in case want ideas, have written blog article on doing type of authentication flow facebook , twitter: http://blog.miguelgrinberg.com/post/oauth-authentication-with-flask


Comments

Post a Comment

Popular posts from this blog

qt - Using float or double for own QML classes -

-
i've created components , helper methods using c++ , qt used in qml gui. of methods calculate gui elements (size, transformations, scene graph items creation). target arm 32 bit using opengl / eglfs render output. opengl using float , qml using real (defined double ). what should use in c++ do not lose precision? if use qreal ( double ) shouldn't lose precision. if git grep float in qtbase.git , can find out bit more: dist/changes-5.2.0-**************************************************************************** dist/changes-5.2.0-* important behavior changes * dist/changes-5.2.0-**************************************************************************** dist/changes-5.2.0- dist/changes-5.2.0- - qt compiled qreal typedef'ed double on dist/changes-5.2.0: platforms. qreal float on arm chipsets before. guarantees more dist/changes-5.2.0- consistent behavior between platforms qt supports, binary dist/chan...
Read more

Create Outlook appointment via C# .Net -

-
i need create outlook appointment using microsoft.office.interop.outlook , while can work locally on own workstation , works if run web application via server's browser, not work when connect server externally. hence, think might permission issue. i changed application pool identity " localsystem " don't access denied error. unfortunately, doesn't work. the app behaves if appointment created, appointment doesn't appear in outlook. here include file on top of aspx.cs page using outlook = microsoft.office.interop.outlook; here code using pop appointment. outlook.application apptapp = new outlook.application(); outlook.appointmentitem appt = apptapp.createitem(outlook.olitemtype.olappointmentitem) outlook.appointmentitem; appt.subject = txtfirstname.text + " " + txtlastname.text; appt.body = txtcomment.text; appt.alldayevent = false; appt.start = datetime.parse(txtreminderdate.text + " 8:00 am"); appt.end = datetime.p...
Read more

ios - Swift Array Resetting Itself -

-
i have 2 arrays: pointhistory , datehistory . have nstimer , , when timer runs out, action called. in action appending int pointhistory , , current date string datehistory . here timer action: func timeraction() { let steppervalue = int(stepper.value) employee.numberofpoints = steppervalue networking.saveemployee(employee, completion: { (error) -> void in if error != nil { let alert = uialertcontroller(title: "error", message: "there error updating \(self.employee.name)'s points", preferredstyle: .alert) let alertaction = uialertaction(title: "ok", style: .cancel, handler: nil) alert.addaction(alertaction) self.presentviewcontroller(alert, animated: true, completion: nil) } }) var dateformatter = nsdateformatter() dateformatter.dateformat = "mm-dd-yyyy" dateformatter.timezone = nstimezone.localtimezone() var date = nsdate() var ...
Read more