[SHINDIG-1869] OAuth verifier not being added to requests because of recent OAuth popup changes

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Invalid
• Fix Version/s: 2.5.0-beta5
• Assignee: Dan Dumont
• Reporter: Ryan Baxter
• Created: 13/Sep/12 19:26
• Updated: 20/Sep/12 20:50
• Resolved: 20/Sep/12 20:50

Description

I was able to reproduce this with a gadget using OAuth 1.0a. The OAuthCallbackServlet returns some javascript which calls window.opener... Before the change to the OAuth popup code window.opener was the gadget window, however now it is the container. So the variable gadgets.io.oauthReceivedCallbackUrl_ is never actually set in the gadget window, only in the container. The oauthReceivedCallbackUrl_ contains parameters that may be necessary when making requests for resources protected by oauth and the provider may reject them if they are missing.