$ 0 0 I can confirm that aru2man's response is the solution, please mark his as the correct answer. In a web context, we need to be saving the AuthorizationKey and AuthorizationSecret before we redirect the user off to Twitter.