diff --git a/packages/oauth/end_of_popup_response.js b/packages/oauth/end_of_popup_response.js
index fd6a1ae20b..ed554160db 100644
--- a/packages/oauth/end_of_popup_response.js
+++ b/packages/oauth/end_of_popup_response.js
@@ -9,8 +9,8 @@
 
     if (config.isCordova) {
       var credentialString = JSON.stringify({
-        credentialToken,
-        credentialSecret,
+        credentialToken: credentialToken,
+        credentialSecret: credentialSecret
       });
 
       window.location.hash = credentialString;
diff --git a/packages/oauth/package.js b/packages/oauth/package.js
index 524b0aeed9..841f327a07 100644
--- a/packages/oauth/package.js
+++ b/packages/oauth/package.js
@@ -1,6 +1,6 @@
 Package.describe({
   summary: "Common code for OAuth-based services",
-  version: "1.2.6"
+  version: "1.2.7"
 });
 
 Package.onUse(api => {