[SOLVED] BUG: Authorization 'not you?' link redirects to homepage

API
3

Sure. Auth link was:

https://api.twitch.tv/kraken/oauth2/authorize?response_type=token&client_id=wvjeruxtqkzc3nnca3zf0h25b987a2&redirect_uri=http%3A%2F%2Fgrowf.org%2FDumbot%2F&scope=chat_login&force_verify=true

‘not you?’ link was:

https://www.twitch.tv/logout?return_to=https%3A%2F%2Fapi.twitch.tv%2Fkraken%2Foauth2%2Fauthenticate%3Faction%3Dauthorize%26client_id%3Dwvjeruxtqkzc3nnca3zf0h25b987a2%26force_verify%3Dtrue%26redirect_uri%3Dhttp%3A%2F%2Fgrowf.org%2FDumbot%2F%26response_type%3Dtoken%26scope%3Dchat_login

Note: This is for a desktop app (yet another bot) so I’m not passing state because there’s no CSRF to worry about and the redirect_uri goes nowhere (404) because I intercept as soon as a redirect to that URL occurs in my app’s dialog.