Twitter OAuth Driver
A Driver for Twitter OAuth authorization.
The Twitter OAuth Driver manage Twitter OAuth protocol to authenticate and grant scope permissions.
| Setting | Description |
|---|---|
| Name | The name that will identify this auth. |
| Scopes | The list of scopes this auth has access to, those can be revoked at twitter.com/settings. |
| Client ID | The public identifier of your Twitter Dev App. |
| Client Secret | The secret key of your Twitter Dev App. |
| Refresh Token | The token that will allow us to obtain and refresh an Access Token. |
OAuth Security
Learn more about Essentials OAuth security protocols.
Custom Twitter Dev App
Due to Twitter API policies it is not possible to use a ZOOlanders oAuth App, instead you must setup a custom Twitter Dev App and use your own credentials. We have listed all the steps required below. Once ready, copy the resulting informations (Client ID, Client Secret and Refresh Token) into the respective fields.
ZOOlanders OAuth
Beware that it's a technical process that requires some development skills like interacting with REST APIs.
Step 1. Create a new Developer Application
Following the Twitter guide select the plan that best suits your case. Once the app is created, you need to enable the OAuth2 support at the bottom of the App Page on the Twitter Developer Portal.
Step 2. Generate a refresh token manually
Generate a refresh token via REST APIs calls following this guide where the first step is to generate a proper authorization url and visit it in your browser. The url will look something like this:
https://twitter.com/i/oauth2/authorize?response_type=code&client_id=YOUR_APP_CLIENT_ID&redirect_uri=https://www.example.com&scope=tweet.read%20users.read%20offline.access&state=state&code_challenge=challenge&code_challenge_method=plain
Be sure that the redirect url you set there is the same you specified at Step 1 in your app settings. It doesn't need to be a particular url, it can be whatever you want, but it should be the same as the one specified in the redirect_uri parameter.
Step 3. Authenticate with a twitter account
When visiting such url, you will be asked to authenticate with your desidered twitter account, and allow access. The system will redirect you to the url specified in the redirect_url parameter. Ignore the page itself and look at the url. Copy the value of the code pararameter, you will need it in the next step.
Step 4. Get a refresh token
Using a console or a tool like Postman, make a post request to create an access and refresh token:
curl --location --request POST 'https://api.twitter.com/2/oauth2/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'code=THE_CODE_YOU_COPIED_AT_STEP_6' \
--data-urlencode 'grant_type=authorization_code' \
--data-urlencode 'client_id=YOUR_APP_CLIENT_ID' \
--data-urlencode 'redirect_uri=https://www.example.com' \
--data-urlencode 'code_verifier=challenge'
In the reply, copy the value of the refresh token. Then fill in Client id, Client Secret and Refresh Token in Essentials configuration.