Questions tagged [access-token]
Access Token is the last token acquired during the OAuth authentication process.
4,046
questions
0
votes
0
answers
6
views
How can i get username in outh 2 token?
Im trying to get user properties from oauth2 token, using login microsoft request, but i just get the email in payload token. Is there a way to get the username in token?
This is the complete request:
-1
votes
1
answer
36
views
Passport: access a specific route only if the user is not logged in
I'm using Passport for a work project.
I have a "generic" token available and thanks to it it is possible to access a specific route without the user having logged in.
For example, to make ...
0
votes
0
answers
19
views
Get sharepoint api access token using userName and password in Dot Net Core (all available solutions show for Dot net framework)
I am trying to get sharepoint access token for sharepoint api by using userName and password.
I tried using "SharePointOnlineCredentials" method from Microsoft.SharePoint.Client but this is ...
0
votes
1
answer
26
views
GMAIL API Acces token duration
How can I extend the gmail api access token to 1 week?
I see that a service account is necessary?
To have a service account do I have to pay?
Since I tried to create one and it asks me to have google ...
0
votes
0
answers
15
views
Keycloak Long lived token for Mobile Apps
we have a Mobile App & we use Keycloak as our authentication system. We receive both access_token & refresh_token via Keycloak Rest API.
Although I have X days set in "Access Token ...
0
votes
1
answer
16
views
Why is the BFF pattern only applicable to SPA's?
I've been reading about BFF, more specifically about Duende.BFF, seeing if it could make sense for our solution of micro-frontends.
We already use Duende.IdentityServer for the token generation, so ...
0
votes
1
answer
23
views
Best way to use access tokens for authentication and authorization
What is the best approach to use personal access tokens for authentication and authorization of a mobile app?
What I do is on login I generate a token valid for 30 mins. On each request, all the ...
0
votes
3
answers
71
views
how to verify a JWT token with empty payload
Below code works fine when payload is present .But when payload is empty i get error as
"Body/Payload is missing"
How to fix the error.I am able to verify the token on jwt.io website
Sample ...
0
votes
1
answer
34
views
SuperHero API - When putting base url into web browser with provided access token I receive invalid id error [closed]
I am trying to use https://superheroapi.com/ for a school project and I have logged in with facebook to receive an access token. When I enter this into my web browser https://superheroapi.com/api/...
0
votes
0
answers
37
views
Safely cache and store personal access tokens
I'm working on a R package that interacts with APIs from GitHub, Google, and Calendly and these services all have tokens. Our package directs the user to create a personal access token, let's say a ...
0
votes
0
answers
18
views
CloudFront - Creating a signed URL using a custom policy and custom condition
I want to create a sign url to s3 files and I want to let access only to requests that contain an Authorization token, according to the AWS developer guide: https://docs.aws.amazon.com/...
0
votes
0
answers
18
views
InfluxDB API token concept
I am using InfluxDB OSS v2 for a small project, but did not quite understand how API tokens and users should be used.
Goal
Having a setup that follows the least privilege principle. This should ...
2
votes
0
answers
27
views
Access token based server client communication
I am currently working on a private project using a client-server communication via TCP.
I have implemented a Two Sides Challenge Response algorithm as authentication mechanism, so both the server and ...
0
votes
0
answers
44
views
How to fetch the refresh token In all API's using FastAPI Oauth
Using the External API access token and refresh token will be fetched.
By creating a new API that accepts client id and client secret as input and gives a response access token and refresh token.
...
0
votes
1
answer
15
views
MicrosoftOnline Bearer Token retrieval works on one server but not the other
I have a service that has been running successfully (and still is) on a Windows server for several years.
The customer wanted to double capacity so wish it to run on a second Windows server. However, ...
0
votes
0
answers
33
views
Vimeo Oauth Authorization - 401 Unauthorized
I am attempting to obtain an authorization token from Vimeo and am using an approach highlighed on the following Vimeo page: https://developer.vimeo.com/api/authentication. The problem I am having ...
0
votes
0
answers
13
views
Keep user logged in for variable times in flutter with aws amplify and cognito
I want the user to decide how long the user will keep logged in the app.
Adding a checkbox “keep me logged in” for e.g 2 days, 15 days, 30 days (as options and whatever maximum is possible) in the ...
0
votes
2
answers
23
views
how to use props and a user token in one js function?
I am looking for a solution where it is possible to use props and a user token to create a dynamic Dialog window for changing the users meta data (e.g. password).
When I click the button in the ...
-2
votes
0
answers
18
views
Token authentication problem with remote connection area
I am using Cisco AnyConnect to access the VPN, and after accessing the VPN I access the remote desktop by providing username and password. This remote server has Windows installed.
Yesterday I ...
0
votes
0
answers
20
views
Can some provide assistance on Resolving revoked Access Token error?
I am using the LinkedIn oAuth 2.0 API , to retrieve posts , using /rest/posts API
I am able to successfully generate the access_token, refresh_token both,
Object { access_token: "TOKENVALUE"...
0
votes
0
answers
12
views
Dribbble API access_token expiration timeout
I am trying to figure out if there is any expiration / timeout associated with an access_token generated by dribbble API.
I have followed the API docs to generate access_token via calling
https://...
1
vote
1
answer
45
views
Flutter DIO Refresh Token Loop
I'm building a Flutter App that primarily utilises API calls to function, however am running into 401 Unauthorised errors after the bearer token expires (every 4 hours).
I have tried to implement a ...
-1
votes
0
answers
75
views
Are There Alternatives to JWT Refresh Tokens?
I am building an app using NestJS (Node) on the backend, and Angular on the front. I use JWT for authentication. Upon login I send an access token and an expiration duration (1 hour).
{
"...
0
votes
0
answers
31
views
Trouble Getting Access Token from StockX API (OAuth2)
I am attempting to retrieve an access token from the StockX API using OAuth2 authentication. I have followed the documentation provided by StockX here and have implemented the following C# code:
...
0
votes
0
answers
35
views
Generating AWS access token from refresh token
I am currently working on a client script to interact with my .net 6.0 web api in AWS.
I am using AWS Cognito to handle authorisation on my endpoints.
After reading the documentation I understand the ...
0
votes
1
answer
20
views
Trying to get ebay refresh token
I'm building an application that utilizes eBay's Buy API to retrieve information about currently listed products. My issue is that the access token I obtain expires every 2 hours, and I need a refresh ...
0
votes
1
answer
38
views
How can i generate a dropbox api access token that doesnt expire?
Is it possible to generate an access token for DropBox API access that does not expire?
By happenstance I discovered that the generated access token lasts only a few hours and is intended for ...
0
votes
0
answers
24
views
Angular(typescript) 401 unauthorized error issue
I've used the similar approach using Angular(Type script) and facing "GET https://www.googleapis.com/oauth2/v3/userinfo 401 (Unauthorized)" error on console I don't know what is wrong here ...
0
votes
1
answer
87
views
Wyze SDK: How do I use the refresh token properly?
I'm trying to understand how the refresh_token() function works in the Wyze python SDK:
https://github.com/shauntarves/wyze-sdk/blob/master/wyze_sdk/api/client.py
Let's say I want to access the Wyze ...
0
votes
0
answers
25
views
Authentication and authorization with different Keycloak servers
I have a Keycloak server that provides authorization for the different resources of an API Gateway.
The current workflow is: authenticate user with Keycloak, each user with a role assigned, and ...
0
votes
1
answer
32
views
Does google offer any way to silently refresh/keep alive an access token gained from implicit flow?
I am being forced to use implicit flow for a windows application as it cannot safely store the client_secret and while Google says they support PKCE Code Authorisation flow, it REQUIRES you have the ...
0
votes
0
answers
56
views
How to implement usage of refresh token with next-auth
I'm currently working with a backend that uses Django, DRF, and simple_jwt for authorization. On the frontend, I have React, Next.js, and next-auth. I've successfully implemented the retrieval of the ...
0
votes
0
answers
17
views
Why can’t I log in using the token contained in the cookie on mobile?
The front end uses React and the back end uses Django, each communicates with a server with a different domain in AWS, and the login functions work well on the web
Currently, my functions only work ...
0
votes
1
answer
62
views
Logout error in backend auth- not able to match access token
I am working on an LMS based software where currently I am working on the authentication part and for that I am using Typescript, Redis and MongoDB. I have created four routes as of now: Register, ...
0
votes
1
answer
35
views
Client side securing token vulnerability circular dilemma
I am sorry but this question needs to be long so you can understand the problem and it is absolutely relative the size of my problem, I am seeking web security experts opinion so thank you for your ...
0
votes
1
answer
61
views
Different styles of tokens
My company has Artifactory (Enterprise Plus 7.63.5 rev 76305900) which my team uses for container images and host some other large files that are too big or inappropriate for Github. I've been ...
0
votes
0
answers
62
views
Office.auth.getAccessToken() is not working in Outlook Web. Error 13006
The call to Office.auth.getAccessToken({ allowSignInPrompt: true, allowConsentPrompt: true, forMSGraphAccess: true }).then(console.log); fails with the following response.
{
"name": &...
2
votes
1
answer
34
views
Idea on access/refresh token management
I have a web API which uses JWT tokens for accessing resources. Tokens are generated and sent to the client upon a successful authentication. A client uses them to access API's resource by attaching ...
1
vote
1
answer
51
views
What's family on a JWT refresh token rotation
I'm studying JWT Access Tokens (AC) and Refresh Tokens(RT) with rotation - that means for every renew RT request, application generates a new pair of RT and AC tokens.
I see some blogs, posts ...
1
vote
1
answer
24
views
Unique secret by user for JWT Token on Refresh Token Rotation model
I'm implementing a Refresh Token Rotation on server using JWT tokens with HmacSHA256 sign.
To improve security refresh tokens are being persisted into database to validate a refresh token was used ...
-1
votes
1
answer
95
views
How do I get an GitHub app installation token to authenticate cloning a repository
I am writing a Python application that needs to clone private repositories from an organization. I've already registered a GitHub App, and I can see in the documentation that this needs an ...
0
votes
0
answers
18
views
Trying to figure out how access tokens and refresh tokens work with my expressjs and mongo api
I'm building my first API using expressjs and mongodb. I am stuck on the tokens portion of the api. I see stuff online telling me to use JWT's and keep them in http only cookies to prevent malicious ...
-1
votes
1
answer
54
views
Error Generating 402 Payment Required for American Express, but Successful for Visa, Discover, MasterCard
I'm encountering an issue while trying to generate a chargesRequest using the Clover API, specifically when attempting to generate a chargesRequest for AMEX(American Express).
I'm receiving a '402' ...
0
votes
0
answers
116
views
Using AddDistributedSqlServerCache with Managed Service Identity
Hi I have a question about using the SQL backed distributed cache as described in here
https://learn.microsoft.com/en-us/entra/msal/dotnet/how-to/token-cache-serialization?tabs=aspnet
The code I'm ...
0
votes
0
answers
13
views
Google Accuont access token needed for testing
I have an app witch have an google authentication and i want to test some methods. For that case I need the access token that will not expired. The whole authentication works but I don't know how to ...
0
votes
0
answers
25
views
Shared jwt token with cross domain apps i built
I built 3 app in angular with NodeJS backend all apps use the same db and backend apis.
Login App: asks for user creds and after 2FA verification api returns access and refresh token. deployed at for ...
0
votes
1
answer
54
views
I want to authenticate Spring Security OAuth2 with access_token only
I am curious about two things when using the Spring Security OAuth2 method.
Is it possible to perform authentication by checking the access_token every time without using JSESSION or jwtToken?
As an ...
0
votes
1
answer
80
views
How to request access token and make Http call in HttpPost action method?
I am trying to access a protected resource using Azure AD access token in my ASP.NET Core MVC web application. I was able to get access token and make successful Http call with the following code.
...
0
votes
0
answers
59
views
Getting error while validating token when there are multiple audience in the token
I am getting an error while validating the token. This error occurs when we have multiple audiences in the token.
"Message": "Jwt10303: Audience validation failed. jwt.Audience: '["...
0
votes
0
answers
43
views
Office 365 Access Token Retrieval for Accounts with Two-Factor Authentication Enabled
I have an application built with Angular for the frontend, a .NET 7 web API for the backend, and a SQL Server database. I am attempting to integrate Office 365 functionality to read/write emails and ...