Blogger importer HTTP 403 Invalid AuthSub token

[briancolinger]

The auth() method uses a preg_replace to strip non-alpha-numeric characters from the token.

Google has changed the token format to include non-alpha-numeric characters. This is what causes the 403 Invalid AuthSub token error.

I couldn't immediately find any info on what specific characters the AuthSub token might contain. That is the reason for the wild card in the preg_match.

If anyone else knows what characters should be allowed, please let me know and I'll update the patch.

[Otto42]

Related: #14566

[Otto42]

Brian,

From #14566, it looks like the only necessary change is to allow the percent sign in the two regex's.

[briancolinger]

Updated the patch to allow % signs in the token.
Also, passing the token through urldecode() per Google's AuthSub spec.
Thanks to @katybeth for the original report from #14566.
Thanks to @paulbert for suggesting the change to the regex.

[briancolinger]

I've applied this patch to the 0.3 version of the blogger-importer plugin.

[filosofo]

For reference:

​http://plugins.trac.wordpress.org/changeset/277464