Alexey Kopytko

The URLs you use you must control fully. I.e. `http://localhost/`

May we ask you to share some examples of private redirect URLs?

Thanks for calling this out! That is indeed a bug. We'll get this fixed up. 👌

It has be an authenticated request for `duration_following_blog` to work: i.e. we have to know which user is asking for the duration. So using your OAuth Consumer Key won't get...

It hard to tell what is wrong without looking at the actual app ID and redirects. Please consider using Tumblr Support form if you can't share them openly. https://tumblr.com/support

Having a client_id will certainly help.

Looking at relevant RFCs, we shouldn't have rejected the request here because an absolute URI is valid even without a trailing slash. But we still want it. https://github.com/jonecx/qio/blob/6973273cd4248f3b9528f29d5bd993f7aa9bd6a2/app/src/main/java/com/jonecx/qio/MainActivity.kt#L27-L31 The fix...

See also: https://bugzilla.mozilla.org/show_bug.cgi?id=973759 It's about weaknesses of a master password. (Though it is more convenient to store just a master password.)

Send a PR and it will be "alive" again 😉

I'm down to review a PR that add this feature.