Make WordPress Core

Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#14629 closed defect (bug) (fixed)

Blogger importer HTTP 403 Invalid AuthSub token

Reported by: briancolinger Owned by:
Milestone: Priority: normal
Severity: major Version:
Component: Import Keywords: has-patch
Focuses: Cc:


The auth() method uses a preg_replace to strip non-alpha-numeric characters from the token.

Google has changed the token format to include non-alpha-numeric characters. This is what causes the 403 Invalid AuthSub token error.

I couldn't immediately find any info on what specific characters the AuthSub token might contain. That is the reason for the wild card in the preg_match.

If anyone else knows what characters should be allowed, please let me know and I'll update the patch.

Attachments (1)

blogger-importer.diff (1.2 KB) - added by briancolinger 5 years ago.

Download all attachments as: .zip

Change History (7)

#1 @Otto42
5 years ago

Related: #14566

#2 @Otto42
5 years ago


From #14566, it looks like the only necessary change is to allow the percent sign in the two regex's.

#3 @briancolinger
5 years ago

Updated the patch to allow % signs in the token.
Also, passing the token through urldecode() per Google's AuthSub spec.
Thanks to @katybeth for the original report from #14566.
Thanks to @paulbert for suggesting the change to the regex.

#4 @briancolinger
5 years ago

I've applied this patch to the 0.3 version of the blogger-importer plugin.

#5 @briancolinger
5 years ago

  • Resolution set to fixed
  • Status changed from new to closed

#6 @filosofo
5 years ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.