OAuth not working and Web Services Manager CSRF probably missing

[erwinweber]

Hi! I'm erwin and I'm running the ESAC website. Since the new update, users can't link their maniaplanet account on the website anymore. The response from Maniaplanet's API looks like this:

There was an error :[
This should not happen in a perfect world. If you think this is a bug you may want to report it in the forums.

Otherwise you can also proceed to the homepage.

Request ID: W-K3eHunax0FMWVe7g94cQAAAIE
Date: November 19, 2018 13:15
Code: 405
Status: Method Not Allowed

Also I can not change any settings in the web services manager page for the app, because I always get an expired/missing csrf token.

[undebutant]

Hi erwin,

Looking at the logs, it seems you are using a GET method for the step 3 of the OAuth2 authentication, however this route is POST only (see maniaplanet documentation, Auth code flow section for more details ^^).

About the web services manager page for the app, we were unable to reproduce the bug. Can you confirm us that you are using the following URL (since Maniaplanet site URL changed recently)?
https://prod.live.maniaplanet.com/web-services-manager

Hope it will help

[erwinweber]

It is the same with prod.live. I thought that after logging out and in again might make it work, but I can't even log out from Maniaplanet.

I will check again about OAuth, but has the API also been reworked with the update? Because it worked the same way and just fine before the update.

[gouxim]

Hey,

The API itself didn't change much, but we migrated many things in our infratructure and there still might be some rough edges.

The website URL is now back to https://www.maniaplanet.com. You might be able to force logging out with https://www.maniaplanet.com/logout.

[undebutant]

By the way, I'm currently updating the doc, but for APIs the correct URL is no longer the one with v4, but :
https://prod.live.maniaplanet.com

[erwinweber]

I was using /webservices/me and that requires a GET request, but i was making the request on maniaplanet(dot)com. I changed it to prod(dot)live(dot)maniaplanet(dot)com and works fine now. Thanks!

I still can't log out from maniaplanet. Not even with /logout.

[gouxim]

Or maybe by login in again with https://www.maniaplanet.com/login ? I fixed a couple of cookie-related issues, that might do it.

[erwinweber]

It worked now.

[gouxim]