Simple Twitter Oauth authorization asking for credentials every time

Question

I am making a simple twitter based login/signup system using the tutorial here. I get the oauth_token as well as oauth token secret every time I get the user to login. Howe

Answer 1

The normal flow dictates that applications send request tokens to oauth/authorize in Twitter's implementation of the OAuth Specification. To take advantage of "Sign in with Twitter", applications should send request tokens received in the oauth_token parameter to oauth/authenticate instead.

(c) https://dev.twitter.com/docs/auth/sign-in-with-twitter

So find where their library (or your code) performs request to /authorize endpoint and replace it with /authenticate

About tokens: as long as you've received user tokens - store it in some persistent storage (database, file, etc) since that tokens are permanent (they will be valid until user haven't revoked them manually).

Answer 2

Enable option "Sign in with Twitter" for application OAuth Settings