Fix DEV stack authentication url with localhost redirect_uri

[willemarcel]

No description provided.

[jake-low]

I tried testing this. What I observed was:

1. I clicked "Sign in" in OSMCha
2. I was directed to osm.org to authorize OSMCha to access my account
3. After clicking "Authorize" I was directed back to OSMCha, but instead of being logged in, I see an error page that says Source authorized does not exist

Is that expected? In Slack you mentioned that there's a backend issue that affects this too, so maybe that's what I'm seeing, but just wanted to check.

[willemarcel]

@jake-low I think this solution will not work. I'm seeing this error in the osmcha backend when I try to login:
oauthlib.oauth2.rfc6749.errors.InvalidGrantError: (invalid_grant) The provided authorization grant is invalid, expired, revoked, does not match the redirection URI used in the authorization request, or was issued to another client.

[batpad]

Hmm .. can we try:

• Go the OAuth2 Application Settings in your OSM Profile (My Settings) for the OAuth2 app keys being used
• Check the Redirect URIs
• I think you will need to add something like http://127.0.0.1:8000 to the list of allowed redirect URIs

Another thing to try is maybe redirecting to http://localhost:8000 instead of http://127.0.0.1:8000 here: https://github.com/OSMCha/osmcha-frontend/pull/743/files - this redirect is basically being performed by openstreetmap.org and it won't allow redirecting to arbitrary URIs not in the list of allowed Redirect URIs in your application config. There might be an exception for localhost that does not get applied when it's written as 127.0.0.1

Am pretty certain this should be the issue - if 127.0.0.1 already exists in the list of allowed Redirect URIs, then I don't know what's going on ...

[willemarcel]

@batpad I have 127.0.0.1/authorized in the allowed redirect urls of the oauth2 key, OSM oauth2 doesn't allow localhost.

A solution I used on another project was to add another endpoint in the backend to authenticate and redirect the user to 127.0.0.1