This website is making a potentially unsafe request. We recommend you do not allow access

Question

I have been receiving this warning http://screencast.com/t/S6B00lMG0oC on google oauth authorisation since yesterday.

Can it be somehow related to the fact that I use oauth version 1 implementation which is depreceted?

Thanks in advance

Answer 1

You are seeing that warning because nimble.com is using OAuth v1.0 (which is vulnerable to Session Fixation Attack, see how it works). In order to avoid getting that warning I recommend you implement OAuth v1.0a as per Google documentation. Alternatively, you could implement OAuth2 as suggested by Chao Wei.

You also mentioned that you started seeing the warning yesterday, that feels wrong as a warning message for apps using (legacy) OAuth v1.0 has been shown for years in Google authorization pages.