Page 1 of 1
OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 14:23
by erwinweber
Hi! I'm erwin and I'm running the ESAC website. Since the new update, users can't link their maniaplanet account on the website anymore. The response from Maniaplanet's API looks like this:
There was an error :[
This should not happen in a perfect world. If you think this is a bug you may want to report it in the forums.
Otherwise you can also proceed to the homepage.
Request ID: W-K3eHunax0FMWVe7g94cQAAAIE
Date: November 19, 2018 13:15
Code: 405
Status: Method Not Allowed
Also I can not change any settings in the web services manager page for the app, because I always get an expired/missing csrf token.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 14:55
by undebutant
Hi erwin,
Looking at the logs, it seems you are using a GET method for the step 3 of the OAuth2 authentication, however this route is POST only (see
maniaplanet documentation, Auth code flow section for more details ^^).
About the web services manager page for the app, we were unable to reproduce the bug. Can you confirm us that you are using the following URL (since Maniaplanet site URL changed recently)?
https://prod.live.maniaplanet.com/web-services-manager
Hope it will help

Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 15:19
by erwinweber
It is the same with prod.live. I thought that after logging out and in again might make it work, but I can't even log out from Maniaplanet.
I will check again about OAuth, but has the API also been reworked with the update? Because it worked the same way and just fine before the update.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 15:22
by gouxim
Hey,
The API itself didn't change much, but we migrated many things in our infratructure and there still might be some rough edges.
The website URL is now back to
https://www.maniaplanet.com. You might be able to force logging out with
https://www.maniaplanet.com/logout.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 15:27
by undebutant
By the way, I'm currently updating the doc, but for APIs the correct URL is no longer the one with v4, but :
https://prod.live.maniaplanet.com
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 15:34
by erwinweber
I was using /webservices/me and that requires a GET request, but i was making the request on maniaplanet(dot)com. I changed it to prod(dot)live(dot)maniaplanet(dot)com and works fine now. Thanks!
I still can't log out from maniaplanet. Not even with /logout.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 19 Nov 2018, 18:29
by gouxim
Or maybe by login in again with
https://www.maniaplanet.com/login ? I fixed a couple of cookie-related issues, that might do it.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 21 Nov 2018, 11:32
by erwinweber
It worked now.
Re: OAuth not working and Web Services Manager CSRF probably missing
Posted: 21 Nov 2018, 12:34
by gouxim