Twitter oAuth is working again, in fact it never went away. All that was suspended was the ability to grant new access tokens. Existing ones worked fine. At least from my rudimentary testing.

It seems like it came back sometime around 10 o’clock eastern. I immediately noticed things weren’t working on TweetARun.com but Twitter was at least providing an authorization token.

A bit of debugging revealed that Twitter no longer respects the oauth_callback parameter passed in by the relying party. It seems to be just directing the token back to the domain that requested it rather than the page in the oauth_callback. I checked the spec and sure enough oauth_callback is there: [LINK] but maybe we’ll see an update in the near future.

Anyway, glad to get oAuth back. I far prefer it to OpenID and am looking forward to pressing on with TweetARun.com.