Strava Integration OAuth Redirect Issue

[jasonwaters]

I'm having a problem with the Strava backend and it's been discussed on the Strava API group here: https://groups.google.com/forum/#!topic/strava-api/Tr7mao3S5VM

"During OAuth2 authorization I am getting redirected to:

http://localhost:8000/api/v1/social-auth/complete/strava/?redirect_state=xxxxxxx?code=xxxxxxxxx&state=xxxxxxxxx

Note the query parameter. There is a question make after the redirect_state parameter and before the code. There should be an '&' there."

Anyway, it turns out both me and the original poster of that topic are having the same issue and we are both using python-social-auth. I wondered if you could test it on your end and confirm it's not a python-social-auth issue?

[omab]

Looks like Strava provider doesn't like extra parameters in the Redirect URI and instead of checking for them forces the append of ?code=xxx&state=xxx. Since Strava sets the state already, it should be safe to disable the redirect_state support in the backend, but this looks like a bug in Strava service.

[omab]

@jasonwaters the change above fixes the issue.

[jasonwaters]

Thanks!