Twitter OAuth
обережно
Twitter’s developer signup and app review can be strict. Approval may take time.
- Go to the Twitter Developer Portal and create or open a project and app.
- In Authentication settings:
- Enable 3-legged OAuth (required for “Sign in with Twitter” and posting on behalf of users).
- Enable Request email address from users if you need email.
- Set the Callback URL to your Casdoor callback URL and save.
Casdoor uses PKCE (Proof Key for Code Exchange) for Twitter OAuth: a code verifier is generated per flow and sent during token exchange to reduce authorization-code interception risks.