Questions tagged [access-token]
Access Token is the last token acquired during the OAuth authentication process.
3,646
questions
0
votes
1
answer
29
views
Dynamics 365 sending api request for token python
I have a successful connection set up in postman. I am trying to replicate the same in python but I am getting issues. I want to get the access token as I get from the Postman but in Python
Postman ...
0
votes
0
answers
12
views
How can I get id_token while authorized using OAuth 2.0?
How can I get id_token while being authorized in website (OAuth 2.0)? I am trying to send post request which is include itself client_id, client_secret, refresh_token, redirect_uri. But in reponse I ...
0
votes
0
answers
12
views
Access drive with access token string
I am trying to access the google drive service using access tokens, in the example code provided it's loading credentials from a .pickle file that is generated upon log in. I am trying to reuse an ...
0
votes
0
answers
24
views
Socialite refresh token (google) vs passport refresh token
I've build Socialite login for my Laravel backend (passport) API and handling the login process looks like that:
/**
* Handle the provider's callback.
*
* @param Request $request
* ...
-1
votes
0
answers
29
views
Receive accesstoken in spring webflux without using webclient
I am developing a oauth2login application using spring webflux. My IAM server is ping federate. I am albe to login successfully to the application and I receive the idtoken from the DefaultOIDCUser ...
0
votes
0
answers
17
views
Authorized ad account IDs management using Facebook API
What kind of acces token is needed to get the list of authorized ad account IDs for the app in facebook api?
I've tried to use user token with ads_management and ads_read permissions but it returns ...
-1
votes
1
answer
42
views
How to fetch data from http response entity?
I am using SpringBoot to fetch access Token from my client. I could not separate the Access Token from the responseEntity. Is there a way to Fetch the AccessToken data alone?
Here is the code:
public ...
0
votes
0
answers
20
views
How to validate elastic access token?
Single sign-on to the Elastic Stack is configured using OpenID Connect as described on the link. It's used to secure backend services that communicate with Elastic instance. Requests with invalid ...
0
votes
0
answers
23
views
Login with Google in React Access Token problem
I have employed the Login with Google functionality in my React app. I am getting the jwt but there is no access token included in the jwt which I need for sending it to the backend (Laravel). On the ...
0
votes
0
answers
15
views
how to automatically generate access_token form OAuth for API?
I am using Spotify's API to fetch data and its using OAuth so I need to generate a new access_token every hour to use the API.... is there a way to generate access-token automatically ?
0
votes
2
answers
109
views
How to get permanent token for using whatsapp cloud api?
The access token provided by Whatsapp cloud API expires in 24 hours. Is there a way to get a permanent access token?
There is an official link for getting a permanent token on the whatsapp website : ...
2
votes
3
answers
49
views
Why doesn't Access Token have the identity of user?
I am struggling with the concept of access tokens in regards to them not having the identity of the person making the request.
And i think i may be using access tokens incorrectly in my project.
The ...
0
votes
0
answers
47
views
Getting the User Email from Microsoft 365 OAuth2 for IMAP
I want to use the Microsoft 365 OAuth2 to authenticate and authorize users in a multi-tenant environment for IMAP/SMTP access using the scope:
openid profile email offline_access https://outlook....
0
votes
0
answers
21
views
When trying to make an API call i get the error,"errorMessage" : "No recognized authentication method was provided."
I am tyring to make an api call to trade a code for an api access token using a client id and client secret to call the TinkOAuthApi. This was supposed to return an api access token to get a ...
-1
votes
2
answers
54
views
Passing Header Auth Bearer token as variable in Powershell Invoke-RestMethod
I have the below code, where i am trying to capture the access token and passing it as a variable in the Headers section for Bearer token, but looks like the $Token.access_token is not getting ...
1
vote
0
answers
75
views
Assertion is not within its valid time range. Ensure that the access token is not expired before using it for user assertion, or request a new token
I am trying to generate access token using On-Behalf-Of flow which will be used to authenticate API calls. I am adding a claim called userIdToken which is value of id_token in startup file(sample ...
0
votes
0
answers
32
views
Storing Discord API access tokens in the database?
I'm building an app that uses the Discord OAuth2 API to check a user's roles. Making a request requires an access token.
Currently, I've stored the refresh token in my app's MongoDB database, and use ...
0
votes
1
answer
30
views
How can we obtain an access token for the user by only knowing the username in keycloak?
In my application, users can perform some tasks without login via the keycloak. After performing the task, I want to get an access token from keycloak by giving the username of the user to ...
1
vote
1
answer
49
views
How to get access token with roles for specific client?
I have setup similar to this in keycloak:
Client:
frontend (public, getting token from this client)
backend1 (confidential)
backend2 (confidential)
Client scope:
roles_all (to include users' roles ...
0
votes
0
answers
13
views
Can I create 2 JWT tokens, store one in localStorage and the other in httpOnlyCookie, validate both Would this prevent both CSRF and XSS?
I usually Store my JWT in an http-Only-Cookie but it is really a lot of work grabbing it for my client side especially if I implement access token and refresh token and is also vulnerable to CSRF. I ...
-1
votes
1
answer
36
views
How to recall the API request after getting the refresh token?
I am trying to recall the API request after getting the refresh token from the API.
Having issue in recall the same API request.
It shows invalid access token error while running this api.
how to fix ...
0
votes
3
answers
62
views
Shopee RefreshAccessToken always return Error param
i've tried to get a new token, by running shopee open api RefreshAccessToken with php curl,
but the result always give me error param code.
from this documentation : https://open.shopee.com/documents/...
0
votes
1
answer
57
views
Retrieve Keycloak attributes in access_token
I can't get permissions that a role has defined in my access_token.
I defined 3 roles (with Keycloak): ADMIN, GUEST and SUPERADMIN.
SUPERADMIN has read, write and gestion permissions (p_Read, p_Write ...
-1
votes
0
answers
22
views
What to do with protected API and microsoft identity platforms?
Good morning everyone, I am building a web application split between a frontend part (Single Page App) and a backend part (Web API serving resources). I am trying to authenticate users before they can ...
0
votes
1
answer
30
views
AccessToken does not get invalid - Spring OAuth2
i set up spring oauth in my project and authentication seems to work. After testing using PostMan i saw that the AccessToken can be used even after beeing expired...it does not get invalid and the ...
-1
votes
0
answers
8
views
Is it possible to extend the Google socialAccessToken cookie lifetime?
We are experimenting with using hybridauth to allow for social logins on our site.
It appears Google's socialAccessToken cookie only lasts a day. Is it possible to extend its lifetime at all? We haven'...
0
votes
0
answers
33
views
Should i manualy save client ID and client secrets? using django rest framework
This is my first django rest framework project and my question is about manually saving clientID and client secrets vs using a package that automates this.
What I am trying to build is something ...
0
votes
0
answers
20
views
Access Token found in Javascript file?
Hey I am Mehul a Begineer to Bug Bounty Hunting
I have found an Access token in a javascript file while i was searching for any confidential information I want to ask whether it is a confidential ...
0
votes
0
answers
55
views
OKTA Authentication integration in React Next.js app
I am trying to integrate OKTA app into the next.js app. When I integrate OKTA auth using OIDC, I get a JWT session token in the response. I need an Id token and access token in the success response ...
0
votes
0
answers
4
views
How to update Token to httpclient object/ all the async calls triggered from windows client while few are in progress
We have a Windows application which reads a batch of files and upload them to server in loop.
this batch of files are being uploading using httpclient.sendAsync.
where after few file uploads are in ...
0
votes
1
answer
29
views
How do I track the origin of a token in Gitlab?
Given a gitlab project/group access token, how do I find out the name of the token and from which group/project it came from?
0
votes
1
answer
16
views
I am trying to access the GDrive api after authentication with passport js. However, I am getting this error -
Error -
The API returned an error: Error: No access, refresh token, API key or refresh handler callback is set.
What I am trying to do is -
app.get("/getinfo", (req,resp)=>{
const ...
1
vote
1
answer
76
views
Auth0 Request and use a Management API token from a Flutter App
We need to allow our Flutter application to save a property in the user_metadata when the application starts.
As I understand this is a task to be done with the Management API and in order for the ...
-1
votes
1
answer
46
views
Power BI Desktop - Storing credentials
I am fetching POWER BI admin and workspace information using the Power BI Rest API from the power BI Desktop which I plan to publish as a report later. I have written a function in Power Bi query ...
0
votes
0
answers
6
views
laravel passport different token expire for different auth user
in my project I have two authenticable user (user, admin) models and I want different token expire time for each model. for example, one month token expire for user and one day for admin..
with this ...
0
votes
0
answers
12
views
Get oauth2.0 Access token with NodeJS
I'm having trouble getting an access token using node.
I can do it with Postman, but it expires when I restart my computer.
This is the code I made, reading some confusing documentation on the ...
0
votes
0
answers
48
views
getting error {"error": "invalid_client"} when creating access token in django
I have created Application in my project and its successfully created. and I received Client ID and Client secret from this.
but when I am entering command to get access token this gives me an error ...
1
vote
1
answer
38
views
What are the default expiry time for Access Token and Refresh Token? (Django GraphQL JWT)
I use Django GraphQL JWT. Then, I could set the expiry time for Access Token and Refresh Token in "settings.py" as shown below:
# "settings.py"
from datetime import timedelta
...
0
votes
0
answers
11
views
Onelogin custom token. Can we provide custom issuer
Is it possible somehow to change the issuer in onelogin token, since there is option to create a custom access token. I could not see that option in documentation. However, does anybody have clarity ...
0
votes
0
answers
50
views
Null pointer exception while acquiring azure AD token using tenent id , cliemt id and authority in java
I am facing Null pointer exception while acquiring azure AD token using tenent id , client id and authority in java
We are following same code provided by Microsoft and available on github.
...
1
vote
1
answer
93
views
Google Identity Services : How to refresh access_token for Google API after one hour?
I have implemented the new Google Identity Services to get an access_token to call the Youtube API.
I try to use this on an Angular app.
this.tokenClient = google.accounts.oauth2.initTokenClient({
...
1
vote
0
answers
33
views
Are there any problems if access token is set as http only cookie?
Isn't it a good way to set access token as http only cookie like we do with refresh token? Then we don't need to send access token as response when user logged in.
If we do like that, it ensure access ...
0
votes
1
answer
85
views
Security and best practices for auth w/ refresh & access tokens
Let's say I have a web application where I implemented Refresh Token & Access token JWTs authentication system using the following flow.
User logins with username and password in body that is ...
0
votes
1
answer
76
views
Authentication and third party cookies
I am trying to figure out the best way to implement cross domain authentication.
Scenario:
As a user I log in to youtube.com, when I visit Google.com by typing the domain name https://www.google.com ...
0
votes
1
answer
48
views
SharePoint cannot get Access Token with JavaScript?
I need to get access token from SharePoint, In order to upload some files!
I got access token from postman successfully, But when I try to do the same request with Javascript!
const generateToken = ...
0
votes
0
answers
9
views
Get MS AAD access token from PowerQuery
I am trying to get a Microsoft AAD access token using a Power Query:
let
url = "https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/token",
body = "{ "&...
0
votes
0
answers
11
views
Safe to store API Credentials (access tokens, refresh tokens, api keys) on Local Machine in JSON file?
I have some credentials (access tokens, refresh tokens and the like) that I obtain from facebook. I do not want to make my app public for now and am thinking of just storing these credentials on my ...
0
votes
0
answers
26
views
Trying to get access token with the help of refresh token gives java.lang.IncompatibleClassChangeError
So I am trying to get access token with the help of a refresh token with the method below,
public String refreshAccessToken() throws IOException {
String refresh_token = "****";
...
0
votes
0
answers
134
views
swiftmailer Swift_SmtpTransport compatibility issue with office 365 OAUTH
Getting error when sending mail using the code:
$transport = (new Swift_SmtpTransport('smtp.office365.com', 587, 'tls'))
->setAuthMode('XOAUTH2')
->setUsername('sender@Testmail699....
0
votes
1
answer
30
views
Where can I find java sample for generating google API access token via client sdk?
This video mentioned using http get to retrieve google API access token given client id, client secret and refresh token. However, I don't seem to find the corresponding client sdk call documentation, ...