Signing in via Twitter OAuth doesn't remember authorization

Question

I am writing a web application and have just implemented that a user can sign in via Twitter, using spring-social-(core/twitter). However, Twitter behaves strangely. After the initial authentication/authorization, every time I'm sending a user to Twitter for authentication, Twitter prompts to authorize my application again. I've looked into the connected Twitter profile. My app is there and authorized correctly (in my case for read access). I don't have a case of requesting additional permissions. All my application needs is read access (the authorization dialog confirms this). I am using the `OAuth1Operations` (returned by the `TwitterConnectionFactory`) to do the OAuth dance and save the resulting connection in a database. My front-end is written with Wicket 1.5. I can work around this behavior by just re-authorizing my app again and again when I want to sign in via Twitter, but this is a big nuisance. Anyone knows what I'm missing here? Here is my code: ``` TwitterConnectionFactory…

Accepted Answer

I've found the solution! It is also detailed here: Simple Twitter Oauth authorization asking for credentials every time

The problem was that I specifically requested Twitter to authorize my app every time. Replacing:

```
String url = connectionFactory.getOAuthOperations().buildAuthorizeUrl(token.getValue(), OAuth1Parameters.NONE);
```

with

```
String url = connectionFactory.getOAuthOperations().buildAuthenticateUrl(token.getValue(), OAuth1Parameters.NONE);
```

solves the issue! Calling the URL for authentication does only ask for authorization if the app hasn't been authorized yet.

Signing in via Twitter OAuth doesn't remember authorization

Solution

Problem