Questions tagged [access-token]

Access Token is the last token acquired during the OAuth authentication process.

Filter by
Sorted by
Tagged with
0 votes
0 answers
6 views

How can i get username in outh 2 token?

Im trying to get user properties from oauth2 token, using login microsoft request, but i just get the email in payload token. Is there a way to get the username in token? This is the complete request:
Pedro's user avatar
  • 37
-1 votes
1 answer
36 views

Passport: access a specific route only if the user is not logged in

I'm using Passport for a work project. I have a "generic" token available and thanks to it it is possible to access a specific route without the user having logged in. For example, to make ...
a_l_e_x's user avatar
  • 406
0 votes
0 answers
19 views

Get sharepoint api access token using userName and password in Dot Net Core (all available solutions show for Dot net framework)

I am trying to get sharepoint access token for sharepoint api by using userName and password. I tried using "SharePointOnlineCredentials" method from Microsoft.SharePoint.Client but this is ...
shivraj63's user avatar
0 votes
1 answer
26 views

GMAIL API Acces token duration

How can I extend the gmail api access token to 1 week? I see that a service account is necessary? To have a service account do I have to pay? Since I tried to create one and it asks me to have google ...
Starky Medina's user avatar
0 votes
0 answers
15 views

Keycloak Long lived token for Mobile Apps

we have a Mobile App & we use Keycloak as our authentication system. We receive both access_token & refresh_token via Keycloak Rest API. Although I have X days set in "Access Token ...
Uma Ilango's user avatar
0 votes
1 answer
16 views

Why is the BFF pattern only applicable to SPA's?

I've been reading about BFF, more specifically about Duende.BFF, seeing if it could make sense for our solution of micro-frontends. We already use Duende.IdentityServer for the token generation, so ...
Greggz's user avatar
  • 1,891
0 votes
1 answer
23 views

Best way to use access tokens for authentication and authorization

What is the best approach to use personal access tokens for authentication and authorization of a mobile app? What I do is on login I generate a token valid for 30 mins. On each request, all the ...
alex's user avatar
  • 65
0 votes
3 answers
71 views

how to verify a JWT token with empty payload

Below code works fine when payload is present .But when payload is empty i get error as "Body/Payload is missing" How to fix the error.I am able to verify the token on jwt.io website Sample ...
Rahul Raj's user avatar
0 votes
1 answer
34 views

SuperHero API - When putting base url into web browser with provided access token I receive invalid id error [closed]

I am trying to use https://superheroapi.com/ for a school project and I have logged in with facebook to receive an access token. When I enter this into my web browser https://superheroapi.com/api/...
Gavin's user avatar
  • 1
0 votes
0 answers
37 views

Safely cache and store personal access tokens

I'm working on a R package that interacts with APIs from GitHub, Google, and Calendly and these services all have tokens. Our package directs the user to create a personal access token, let's say a ...
Howard Baek's user avatar
0 votes
0 answers
18 views

CloudFront - Creating a signed URL using a custom policy and custom condition

I want to create a sign url to s3 files and I want to let access only to requests that contain an Authorization token, according to the AWS developer guide: https://docs.aws.amazon.com/...
gil cohen's user avatar
  • 333
0 votes
0 answers
18 views

InfluxDB API token concept

I am using InfluxDB OSS v2 for a small project, but did not quite understand how API tokens and users should be used. Goal Having a setup that follows the least privilege principle. This should ...
Damian Kopp's user avatar
2 votes
0 answers
27 views

Access token based server client communication

I am currently working on a private project using a client-server communication via TCP. I have implemented a Two Sides Challenge Response algorithm as authentication mechanism, so both the server and ...
Viermusketiere's user avatar
0 votes
0 answers
44 views

How to fetch the refresh token In all API's using FastAPI Oauth

Using the External API access token and refresh token will be fetched. By creating a new API that accepts client id and client secret as input and gives a response access token and refresh token. ...
Vinuta Basavaraj Hiremath's user avatar
0 votes
1 answer
15 views

MicrosoftOnline Bearer Token retrieval works on one server but not the other

I have a service that has been running successfully (and still is) on a Windows server for several years. The customer wanted to double capacity so wish it to run on a second Windows server. However, ...
MarkEMarkEMark's user avatar
0 votes
0 answers
33 views

Vimeo Oauth Authorization - 401 Unauthorized

I am attempting to obtain an authorization token from Vimeo and am using an approach highlighed on the following Vimeo page: https://developer.vimeo.com/api/authentication. The problem I am having ...
orlanmon's user avatar
0 votes
0 answers
13 views

Keep user logged in for variable times in flutter with aws amplify and cognito

I want the user to decide how long the user will keep logged in the app. Adding a checkbox “keep me logged in” for e.g 2 days, 15 days, 30 days (as options and whatever maximum is possible) in the ...
GingerAle's user avatar
0 votes
2 answers
23 views

how to use props and a user token in one js function?

I am looking for a solution where it is possible to use props and a user token to create a dynamic Dialog window for changing the users meta data (e.g. password). When I click the button in the ...
hanlok's user avatar
  • 9
-2 votes
0 answers
18 views

Token authentication problem with remote connection area

I am using Cisco AnyConnect to access the VPN, and after accessing the VPN I access the remote desktop by providing username and password. This remote server has Windows installed. Yesterday I ...
Sakurai's user avatar
0 votes
0 answers
20 views

Can some provide assistance on Resolving revoked Access Token error?

I am using the LinkedIn oAuth 2.0 API , to retrieve posts , using /rest/posts API I am able to successfully generate the access_token, refresh_token both, Object { access_token: "TOKENVALUE"...
Murtuza Husain's user avatar
0 votes
0 answers
12 views

Dribbble API access_token expiration timeout

I am trying to figure out if there is any expiration / timeout associated with an access_token generated by dribbble API. I have followed the API docs to generate access_token via calling https://...
Yoz's user avatar
  • 747
1 vote
1 answer
45 views

Flutter DIO Refresh Token Loop

I'm building a Flutter App that primarily utilises API calls to function, however am running into 401 Unauthorised errors after the bearer token expires (every 4 hours). I have tried to implement a ...
Ampsyy's user avatar
  • 11
-1 votes
0 answers
75 views

Are There Alternatives to JWT Refresh Tokens?

I am building an app using NestJS (Node) on the backend, and Angular on the front. I use JWT for authentication. Upon login I send an access token and an expiration duration (1 hour). { "...
Chris Barr's user avatar
  • 31.4k
0 votes
0 answers
31 views

Trouble Getting Access Token from StockX API (OAuth2)

I am attempting to retrieve an access token from the StockX API using OAuth2 authentication. I have followed the documentation provided by StockX here and have implemented the following C# code: ...
Michael's user avatar
  • 202
0 votes
0 answers
35 views

Generating AWS access token from refresh token

I am currently working on a client script to interact with my .net 6.0 web api in AWS. I am using AWS Cognito to handle authorisation on my endpoints. After reading the documentation I understand the ...
Ebikeneser's user avatar
  • 2,398
0 votes
1 answer
20 views

Trying to get ebay refresh token

I'm building an application that utilizes eBay's Buy API to retrieve information about currently listed products. My issue is that the access token I obtain expires every 2 hours, and I need a refresh ...
Zishan Ali's user avatar
0 votes
1 answer
38 views

How can i generate a dropbox api access token that doesnt expire?

Is it possible to generate an access token for DropBox API access that does not expire? By happenstance I discovered that the generated access token lasts only a few hours and is intended for ...
AlvinfromDiaspar's user avatar
0 votes
0 answers
24 views

Angular(typescript) 401 unauthorized error issue

I've used the similar approach using Angular(Type script) and facing "GET https://www.googleapis.com/oauth2/v3/userinfo 401 (Unauthorized)" error on console I don't know what is wrong here ...
Jitendra Chauhan's user avatar
0 votes
1 answer
87 views

Wyze SDK: How do I use the refresh token properly?

I'm trying to understand how the refresh_token() function works in the Wyze python SDK: https://github.com/shauntarves/wyze-sdk/blob/master/wyze_sdk/api/client.py Let's say I want to access the Wyze ...
Aran Bins's user avatar
  • 459
0 votes
0 answers
25 views

Authentication and authorization with different Keycloak servers

I have a Keycloak server that provides authorization for the different resources of an API Gateway. The current workflow is: authenticate user with Keycloak, each user with a role assigned, and ...
netn00b's user avatar
0 votes
1 answer
32 views

Does google offer any way to silently refresh/keep alive an access token gained from implicit flow?

I am being forced to use implicit flow for a windows application as it cannot safely store the client_secret and while Google says they support PKCE Code Authorisation flow, it REQUIRES you have the ...
Grofit's user avatar
  • 17.8k
0 votes
0 answers
56 views

How to implement usage of refresh token with next-auth

I'm currently working with a backend that uses Django, DRF, and simple_jwt for authorization. On the frontend, I have React, Next.js, and next-auth. I've successfully implemented the retrieval of the ...
Павел Васильев's user avatar
0 votes
0 answers
17 views

Why can’t I log in using the token contained in the cookie on mobile?

The front end uses React and the back end uses Django, each communicates with a server with a different domain in AWS, and the login functions work well on the web Currently, my functions only work ...
ramrame98's user avatar
0 votes
1 answer
62 views

Logout error in backend auth- not able to match access token

I am working on an LMS based software where currently I am working on the authentication part and for that I am using Typescript, Redis and MongoDB. I have created four routes as of now: Register, ...
Aman Maddheshiya's user avatar
0 votes
1 answer
35 views

Client side securing token vulnerability circular dilemma

I am sorry but this question needs to be long so you can understand the problem and it is absolutely relative the size of my problem, I am seeking web security experts opinion so thank you for your ...
sabri mahmoud's user avatar
0 votes
1 answer
61 views

Different styles of tokens

My company has Artifactory (Enterprise Plus 7.63.5 rev 76305900) which my team uses for container images and host some other large files that are too big or inappropriate for Github. I've been ...
John's user avatar
  • 307
0 votes
0 answers
62 views

Office.auth.getAccessToken() is not working in Outlook Web. Error 13006

The call to Office.auth.getAccessToken({ allowSignInPrompt: true, allowConsentPrompt: true, forMSGraphAccess: true }).then(console.log); fails with the following response. { "name": &...
flexxxit's user avatar
  • 2,510
2 votes
1 answer
34 views

Idea on access/refresh token management

I have a web API which uses JWT tokens for accessing resources. Tokens are generated and sent to the client upon a successful authentication. A client uses them to access API's resource by attaching ...
Kasbolat Kumakhov's user avatar
1 vote
1 answer
51 views

What's family on a JWT refresh token rotation

I'm studying JWT Access Tokens (AC) and Refresh Tokens(RT) with rotation - that means for every renew RT request, application generates a new pair of RT and AC tokens. I see some blogs, posts ...
Guerino Rodella's user avatar
1 vote
1 answer
24 views

Unique secret by user for JWT Token on Refresh Token Rotation model

I'm implementing a Refresh Token Rotation on server using JWT tokens with HmacSHA256 sign. To improve security refresh tokens are being persisted into database to validate a refresh token was used ...
Guerino Rodella's user avatar
-1 votes
1 answer
95 views

How do I get an GitHub app installation token to authenticate cloning a repository

I am writing a Python application that needs to clone private repositories from an organization. I've already registered a GitHub App, and I can see in the documentation that this needs an ...
Ed Bennett's user avatar
0 votes
0 answers
18 views

Trying to figure out how access tokens and refresh tokens work with my expressjs and mongo api

I'm building my first API using expressjs and mongodb. I am stuck on the tokens portion of the api. I see stuff online telling me to use JWT's and keep them in http only cookies to prevent malicious ...
Zach philipp's user avatar
-1 votes
1 answer
54 views

Error Generating 402 Payment Required for American Express, but Successful for Visa, Discover, MasterCard

I'm encountering an issue while trying to generate a chargesRequest using the Clover API, specifically when attempting to generate a chargesRequest for AMEX(American Express). I'm receiving a '402' ...
Chandra's user avatar
0 votes
0 answers
116 views

Using AddDistributedSqlServerCache with Managed Service Identity

Hi I have a question about using the SQL backed distributed cache as described in here https://learn.microsoft.com/en-us/entra/msal/dotnet/how-to/token-cache-serialization?tabs=aspnet The code I'm ...
samsu's user avatar
  • 65
0 votes
0 answers
13 views

Google Accuont access token needed for testing

I have an app witch have an google authentication and i want to test some methods. For that case I need the access token that will not expired. The whole authentication works but I don't know how to ...
Grymuzka's user avatar
0 votes
0 answers
25 views

Shared jwt token with cross domain apps i built

I built 3 app in angular with NodeJS backend all apps use the same db and backend apis. Login App: asks for user creds and after 2FA verification api returns access and refresh token. deployed at for ...
Sohail Abdul Khaliq's user avatar
0 votes
1 answer
54 views

I want to authenticate Spring Security OAuth2 with access_token only

I am curious about two things when using the Spring Security OAuth2 method. Is it possible to perform authentication by checking the access_token every time without using JSESSION or jwtToken? As an ...
kokojustin's user avatar
0 votes
1 answer
80 views

How to request access token and make Http call in HttpPost action method?

I am trying to access a protected resource using Azure AD access token in my ASP.NET Core MVC web application. I was able to get access token and make successful Http call with the following code. ...
Ibrahim Memet's user avatar
0 votes
0 answers
59 views

Getting error while validating token when there are multiple audience in the token

I am getting an error while validating the token. This error occurs when we have multiple audiences in the token. "Message": "Jwt10303: Audience validation failed. jwt.Audience: '["...
Saurabh's user avatar
  • 15
0 votes
0 answers
43 views

Office 365 Access Token Retrieval for Accounts with Two-Factor Authentication Enabled

I have an application built with Angular for the frontend, a .NET 7 web API for the backend, and a SQL Server database. I am attempting to integrate Office 365 functionality to read/write emails and ...
petra 's user avatar
  • 29

1
2 3 4 5
81