Questions tagged [oauth]

OAuth (Open Authorization) is a specification for client applications to access protected resources on behalf of a user. It was developed as an alternative to users handing out their login credentials to third-party applications.

oauth
Filter by
Sorted by
Tagged with
11 votes
2 answers
956 views

What OpenID solution is really used by Stack Overflow?

I know there are other questions about this, but they are outdated, and I cannot find the answer that would be reliable anywhere. What is really used by Stack Overflow to autentificate users? ...
Rasto's user avatar
  • 17.5k
11 votes
1 answer
3k views

Can ServiceStack Runner Get Request Body?

Is it possible, without major hackery, to get the raw request body of a ServiceStack request within the Runner? I am writing an oauth service provider to run on top of ServiceStack using the new API (...
John Carruthers's user avatar
11 votes
4 answers
27k views

JavaScript OAuth sign in with Twitter

I have to integrate Sign-in-with Twitter in my app as below. https://dev.twitter.com/docs/auth/sign-twitter It is browser based app developed in JavaScript I have been refering google code java ...
user296601's user avatar
9 votes
4 answers
14k views

OAuth + Twitter on Android: Callback fails

My Android application uses Java OAuth library, found here for authorization on Twitter. I am able to get a request token, authorize the token and get an acknowlegement but when the browser tries the ...
Samuh's user avatar
  • 36.4k
9 votes
6 answers
5k views

OAuth instance state in Android

I'm trying to use OAuth in an Android app. I have it working correctly but have sometimes run into a problem during the authentication phase. In Android, I launch the browser for the user to login and ...
GrkEngineer's user avatar
  • 2,132
9 votes
2 answers
15k views

How can I design a secure API/Authentication for mobile apps to access a service?

I want to offer some functions of my webapp to be used in other apps (I'm thinking mainly about smartphones, since they offer more capabilities e.g. GPS, Camera,..). From what I have encountered ...
codie4711's user avatar
  • 798
8 votes
6 answers
16k views

How can Yahoo Mail be accessed by IMAP using OAuth or OAuth2 authentication

According to developer.yahoo.com/mail/ and IMAP responses: * OK [CAPABILITY IMAP4rev1 ID MOVE NAMESPACE X-ID-ACLID UIDPLUS LITERAL+ CHILDREN XAPPLEPUSHSERVICE XYMHIGHESTMODSEQ AUTH=PLAIN AUTH=LOGIN ...
Aleksey's user avatar
  • 199
7 votes
1 answer
14k views

Feed story publishing to other users is disabled for this application

When posting to my friends wall, I got this error: Feed story publishing to other users is disabled for this application. Do I need to submit my application in Facebook, or did I do something ...
user avatar
7 votes
1 answer
7k views

ROauth on Windows using R

I searched SO and saw a few questions posted on the topic, but I didn't find anything directly related to Windows(my previous post was for Linux). More specifically, I am tying to use the twitteR ...
Btibert3's user avatar
  • 39.5k
7 votes
2 answers
17k views

can I use grant_type=client_credentials for google api?

I create a clientid, and clientcredentials in google console. when I request the token with grant_type=client_credentials. I got 401 unauthrorized. { "error": "invalid_client", "error_description"...
Samuel MA's user avatar
7 votes
1 answer
2k views

Connect Twitter Account to existing Devise Account

A user can register through Devise. After the registration a User should be able to connect his Twitter Account In the past i used omniauth to get facebook and twitter connect working. But in this ...
Mini John's user avatar
  • 7,903
6 votes
6 answers
13k views

Getting 401 on Twitter OAuth POST requests

I am trying to use Twitter OAuth and my POST requests are failing with a 401 (Invalid OAuth Request) error. For example, if I want to post a new status update, I am sending a HTTP POST request to ...
Baishampayan Ghose's user avatar
6 votes
3 answers
19k views

Calling a Google Apps Script web app with access token

I need to execute a GAS service on behalf of a user that is logged to my system. So I have her/his access token. I would like somehow to transfer the token to the web app and without having to ...
Martin Dimitrov's user avatar
6 votes
3 answers
9k views

Are there OAuth 2 server side PHP or Java implementations? [closed]

If there is more then one implementation, which one is better/mostly maintained? Specifically for OAuth 2.0 Draft 12.
fudge's user avatar
  • 276
6 votes
2 answers
5k views

Download files in Javascript with OAuth2

I'm developing an single-page with Javascript+AngularJS on the client side and Spring MVC + Spring Security OAuth2 on the server side. Spring MVC acts as a REST controller for any AJAX requests from ...
Dmitry Zolotukhin's user avatar
5 votes
3 answers
21k views

Google Analytics OAuth2: How to solve error: "redirect_uri_mismatch"?

I'm trying to get this example to work: https://developers.google.com/analytics/devguides/config/mgmt/v3/quickstart/web-php#enable The error I'm getting is "Error: redirect_uri_mismatch" . In order ...
LatentDenis's user avatar
  • 2,981
5 votes
2 answers
13k views

Twitter OAuth authentication in javascript

I have looked everywhere for a good example of a JQuery ajax call to authenticate a use in Twitter using their OAuth method. I read the instructions several times and this is what I have so far, at ...
Deylo Woo's user avatar
5 votes
1 answer
6k views

gdata-java-client + oauth2 + access_token secret

I'm currently trying to use the new java client(s) and due to legacy reasons for current state of google libraries, I need to use both the gdata and the new google java client api. Obviously I'd ...
Java Guy's user avatar
  • 1,005
5 votes
4 answers
7k views

Getting Email Address from LinkedIn API

I want to include a "Sign Up using LinkedIn" feature in my app. I'd like to be able to get some information, such as name and email. By default I am able to get a name, but I'm stuck on getting the ...
Luke Irvin's user avatar
  • 1,227
5 votes
1 answer
5k views

Google+ unable to insert moment

Trying example from g+ documentation with Authorize requests using OAuth 2.0: ON. Got Unauthorized as result. Here's output: Request POST https://www.googleapis.com/plus/v1/people/me/moments/vault?...
mente's user avatar
  • 2,796
5 votes
5 answers
12k views

Magento Rest API Oauth URL Returning 404

From the Magento wiki at: http://www.magentocommerce.com/api/rest/authentication/oauth_authentication.html#OAuthAuthentication-OAuthProcess When getting an API token you start off by getting an ...
Matthew Dolman's user avatar
5 votes
1 answer
6k views

What do I do with a spotify api authentication redirect uri in Django?

I've built an app in Django that uses Spotipy, a Spotify API Python Library, and uses the spotipy.util.prompt_for_user_token() command as such to generate a token and access my private library as such:...
Ryan Finley's user avatar
4 votes
1 answer
13k views

Create new magento Rest api to get category list in magento

Does anyone know how to create new magento rest api to get category listing. I already saw this link magento rest api but this not fetch category listings. If any one knows then please solve this..
Bharat Chodvadiya's user avatar
3 votes
3 answers
11k views

Twitter OAuth and accessToken to GET statuses/user_timeline in Objective-C

I'm trying to acquire the accessToken value from Twitter for using it in my app (I need to use API v1.1's Authentication Model for GET statuses/user_timeline); I have registered my app on api.twitter....
SILminore's user avatar
  • 509
3 votes
2 answers
23k views

OAuth2 Authentication and Operations in Unity

I need to implement OAuth2 authentication and some operations for a Windows Mobile application in Unity. I have managed to make it work as a console application (using .NET 4.0 and above), however, ...
Istvan's user avatar
  • 351
3 votes
3 answers
14k views

Flutter: Oauth2 - Problems with redirect uri

I want to set up the oAuth authentication of the Spotify API in my Flutter app. I chose the flutter_web_auth 0.1.1 package. So far, I have managed that the user can log in to Spotify. After logging ...
Jonas Frei's user avatar
2 votes
3 answers
4k views

IPhone + Twitter + LinkedIn + Facebook Error : Command /Developer/Platforms/iPhoneSimulator.platform/Developer/usr/bin/gcc-4.2 failed with exit code 1

I am using MGTwitterEngine oAuth and LinkedIn iOS SDK in my iOS application with facebook-ios-sdk TwitterEngine : https://github.com/bengottlieb/Twitter-OAuth-iPhone LinkedInIphone : https://github....
Amit Battan's user avatar
  • 2,998
2 votes
1 answer
2k views

Keycloak - Assign a client scope to user with a specific role

given the following setup: A user with a realm role "foo-admin" A client named "foo" (Direct Access Grants Enabled, public) A client scope "some:scope" (Optional Client ...
xorph's user avatar
  • 47
2 votes
3 answers
10k views

Getting null Refresh token

I'm using the google-api-java-client version 1.8-beta for oAuth2 authentication with Google accounts. Everything fine until I get the GoogleTokenResponse object, which has the access token but not ...
PapelPincel's user avatar
  • 4,313
0 votes
1 answer
3k views

InvalidTokenException: Unauthorized-401

I am converting a application to use IPP .net API V3. I have already built all the OAuth and saved the token info. Trying to make connection but always get error. I have checked and recheck all the ...
user3397355's user avatar
90 votes
2 answers
71k views

What is the Access Token vs. Access Token Secret and Consumer Key vs. Consumer Secret

I have been using Oauth for a while but have never been completely sure of the difference between these four terms (and the functionality of each). I frequently see (for instance in the Twitter Public ...
Startec's user avatar
  • 12.9k
73 votes
13 answers
108k views

Firebase: This domain is not authorized

I imported Firebase JS v3 API and used to initialize Firebase using: firebase.initializeApp(config); However the app failed to load correctly via web browser on localhost, resulting in the following ...
user6039980's user avatar
  • 3,346
67 votes
3 answers
85k views

Multiple Scope Values to oauth2

I try to post several scope values to allow my application for some google service... I tried with two input field <input type="hidden" name="scope" value="https://www....
Christophe Debove's user avatar
61 votes
5 answers
22k views

Securly Storing OpenID identifiers and OAuth tokens

I am creating a web app that will use OpenID logins and OAuth tokens with Youtube. I am currently storing the OpenID identity and OAuth token/token secret in plain text in the database. Is it ...
Matt McCormick's user avatar
55 votes
3 answers
38k views

Keycloak integration in Swagger

I have a Keycloak protected backend that I would like to access via swagger-ui. Keycloak provides the oauth2 implicit and access code flow, but I was not able to make it work. Currently, Keycloak's ...
melistik's user avatar
  • 551
52 votes
2 answers
20k views

What is the difference between id_token and access_token in Auth0

In Auth0 you can use refresh tokens. In this link, we can see many returned parameters: lock.showSignin({ authParams: { scope: 'openid offline_access' } }, function (err, profile, id_token, ...
Scott Coates's user avatar
  • 2,492
47 votes
5 answers
57k views

AngularJS + OAuth

I'm trying to write a login solution for my Angular App, This means to allow the user to connect via Facebook/Google/Twitter or Register normally. I found Angular-OAuth to be useful, but it didn't ...
Asaf's user avatar
  • 8,166
46 votes
6 answers
138k views

"An access token is required to request this resource" while accessing an album / photo with Facebook php sdk

I am using the php sdk to access a user's albums and photos in a website. I am able to login and also able to retrieve all the info about the albums and photos. However, I am not able to display ...
Alloi's user avatar
  • 683
42 votes
5 answers
27k views

What's the point of a timestamp in OAuth if a Nonce can only be used one time?

I had at first misinterpreted the timestamp implementation of OAuth into thinking that it meant a timestamp that was not within 30 seconds past the current time would be denied, it turned out this was ...
MetaGuru's user avatar
  • 43.3k
41 votes
2 answers
19k views

OAuth's tokens and sessions in REST

The other minute I read an article on OAuth. It described especially the tokens being exchanged between client and service provider during a series of requests. The article also mentioned that OAuth ...
Boldewyn's user avatar
  • 82k
41 votes
8 answers
41k views

Keep getting OAuth::Unauthorized error when using oauth and twitter ruby gems

I am using the ruby twitter gem and oauth to gain access to users twitter accounts. In my code, I have: unless @user.twitter_authd? oauth = Twitter::OAuth.new('token', 'secret') session[:...
Tony's user avatar
  • 18.9k
39 votes
3 answers
20k views

What's the purpose of the client secret in OAuth2?

I have an app that offers an API. This app is an OAuth2 provider. I want to access this API (read & write) with a client-side only app. I'm using JSO to make this easier. It works great. The ...
Robin's user avatar
  • 21.8k
38 votes
4 answers
27k views

oAuth ASP.NET Membership Provider

Are there any recommended resources for implementing a custom membership provider that uses oAuth? The goal would be to have users to log into my ASP.NET MVC application using their existing oAuth ...
Eric Tobia's user avatar
37 votes
3 answers
22k views

OAuth Client Credential Flow - Refresh Tokens

The Scenario I've recently built an API, and have protected its resources using OAuth Bearer Access Tokens. I've used the Client_Credentials Flow, as it will be accessed by clients as opposed to users....
Derek's user avatar
  • 8,480
37 votes
6 answers
30k views

OAuth for Desktop apps?

i wonder how do desktop apps without any domain names use oauth? or is it not supposed to be used this way? if so what do i use? say for tumblr they have an authentication api so i will have to put ...
Jiew Meng's user avatar
  • 85.9k
33 votes
3 answers
20k views

Closing OAuth 2.0 popup window after redirect

I redirect user to the OAuth 2.0 authorization endpoint in popup window. What is best way to close this popup and refresh main window after OAuth 2.0 authorization server redirects user back with an ...
Lukasz Moren's user avatar
  • 1,665
33 votes
5 answers
79k views

How to use SHA256-HMAC in python code?

I am taking message and key from this URL import hmac import hashlib import base64 my = "/api/embedded_dashboard?data=%7B%22dashboard%22%3A7863%2C%22embed%22%3A%22v2%22%2C%22filters%22%3A%5B%7B%...
Venkatesh Panabaka's user avatar
31 votes
4 answers
33k views

Using OAuth for server-to-server authentication?

I'm currently working to specify my company's new partner/public API, which will be a resource-oriented RESTful web service. The missing piece of the puzzle at the moment is authentication/...
Greg Beech's user avatar
  • 135k
30 votes
11 answers
86k views

Could not deserialize key data on decoding JWT python

I am using pyjwt library for decoding the JWT token. I got this error when I am decoding. The code was given in the documantation. import jwt encoded_jwt='''eyJ0eXAiOiJKV1QiLCJhbG......''' secret=b''...
Balakrishnan Sathiyakugan's user avatar
30 votes
1 answer
14k views

Authorizing command line tool to consume Google APIs (through OAuth2.0 or anything else)

I think I understand how OAuth 2.0 works in the context of a mobile app or website - neither is my case. I have a C++ command line application that I want to give access to one of the Google Services ...
rburhum's user avatar
  • 1,641

1
3 4
5
6 7
44