Getting error Missing Parameter: redirect_uri even when a redirect URI is present

[kimberlyhirsh]

Getting this error:
{"error":"parameter_absent","error_description":"Missing Parameter: redirect_uri"}

This error occurs when using Micropub (tried with ownyourgram and Teacup) and when trying to log in to the Indieweb wiki. But there is in fact a redirect URI - for example, when using Teacup, this is in my address bar:

http://kimberlyhirsh.com/wp-json/indieauth/1.0/auth?me=http%3A%2F%2Fkimberlyhirsh.com%2F&redirect_uri=https%3A%2F%2Fteacup.p3k.io%2Fauth%2Fcallback&client_id=https%3A%2F%2Fteacup.p3k.io&state=97bd85bbcb5deb96&scope=create&response_type=code

[snarfed]

also filed on indieweb/wordpress-micropub#137. thanks again for the nudges @kimberlyhirsh. let's track here. which versions of the plugins are you using?

cc @dshanske. you all have been debugging this on IRC too, right? sorry if we're repeating ourselves.

[dshanske]

I have, but I am stumped. It isn't a Micropub problem, solely an IndieAuth one.

[dshanske]

But clearly, by @kimberlyhirsh statement, it is happening even with Indieauth.com, which suggests something browser side.

[philbowell]

I believe I am also having this issue with my site. I receive the same error when I try and log in to anything using my domain and this plugin. I’ve tried Quill, Indieweb.com, and Indigeous on my iPhone and receive this error each time.

[stephenpieper]

I've been getting a similar issue. Any version of the plugin above 2.1.1 gives me a 403 error if I try to sign in to any service using the built in authorisation. It's strange because it worked perfectly and then just stopped.

This is the url I get when trying to log in to Quill:

https://stephenpieper.net/wp-login.php?redirect_to=https%3A%2F%2Fquill.p3k.io%2Fauth%2Fcallback&reauth=1&action=indieauth&_wpnonce=c428877d8d&response_type=code&client_id=https%3A%2F%2Fquill.p3k.io%2F&me=https%3A%2F%2Fstephenpieper.net%2F&state=ad686748e96f9a8c&scope=create%2520update

[kimberlyhirsh]

I'm using IndieAuth 3.1.1 and Micropub 1.4.3.

[dshanske]

@philbowell @kimberlyhirsh We found that one individual has a mod_security rule on their server that filtered URLs in query parameters. Any chance you could talk to your hosting providers?

[stephenpieper]

The mod_security rule that caused my problem is rule 340162
https://wiki.atomicorp.com/wiki/index.php/WAF_340162

My hosting provider whitelisted the rule and Indieauth works again.

[dshanske]

Closed due this now referenced in readme

[kimberlyhirsh]

I know this issue is closed, but I still get this error. My host fixed it, then it popped up again; I went through their customer support process and they whitelisted all the relevant rules they could find and I still seem to get this error. I was so irritated with how they treated me through the process that I want to switch hosts, but financially that's not a good move for me right now. Don't know if there's anything else to do here, but I wanted to document that the error is still occurring for me.