Please Fix Your Domain Verification Process for OAuth

Hey Yahoo Staff!

You don't realize its a massive problem?

Same issue with me:

Application URL: http://www.eumaisvoce.com.br/import-yahoo.php

App Domain: www.eumaisvoce.com.br
http://www.eumaisvoce.com.brGqSSgHBNfxRN5RKjLAXMlw--.html

Various tries, delete and recreate more then once and ever and ever the same problem: 400 Bad Request (when monitoring browser answers) the page tells me: Domain verification failed. Please check that the verification file is in the location above and is named correctly.

My APP uses read contacts permission, so without verify the domain its shows an big freaking alert on authentication.

I done confirmation on Google and Facebook today without problems to similar APP

Somebody fix that stuff plase!

(sorry by any english mistake, not my native language)

Hi Brian: you don't need domain verification for using BOSS API.

Leo: This file doesn't exist anymore. Please let us know if you are still facing the issue.

We are revisit domain verification process to make it simpler. 

Thanks
Saurabh

Saurabh, I'm facing the same issue.  The file exist and has size 0 bytes and can be accessed via web browser:

http://zotel.com/euLUxuk6Uhiir6JkayI0EA--.html


Please help.

Hi,

Can you put some text into the file? Currently apart from http status code 200 there is a check that file is not empty. That should work. 

Thanks,
Vijay

Vijay, 

Thanks for your suggestion.  Adding text into the file did work, i.e. the domain verification step succeeeded.

However, later on, when I use the Contacts API, I still get "Warning: This website has not been verified by Yahoo!. For your security, we recommend that you continue only if you trust this website."

Maybe the verification status hasn't yet reached all Yahoo servers.  I'll check it again in a day or so.

Thanks,
Nav

I have had the same issue with https://developer.apps.yahoo.com/manage (my file is at http://andrea.accomazzi.net/erEe3EhkURzR3HL8Yh4J3Q--.html)

I will add some text inside the file presently, but please notice that the instructions on that page said I had to upload an EMPTY file (emphasis mine), and that's what I did...

Hi,

You are correct, the steps mentioned was misleading. We have corrected it. It now reads "Create a verification file with some content".

Thanks,
Vijay

Our site, www.photio.com, redirects all http calls to https. We have placed the verification file in the root, but not surprisingly, the Yahoo routine doesn't find it under http. So how do we verify?

nothing fot us hacker

Karl,

The domain verification process checks via https if the file is not available via http. Do get back to us if you have trouble verifying your domain.

Vijay