Questions tagged [authentication]

A question about the Stack Exchange authentication process and related API methods.

Filter by
Sorted by
Tagged with
31 votes
6 answers
2k views

Draft Specification for API v2.0

We've started working on the next version of the Stack Exchange API. The current draft specification is available, and we'd like to hear your feedback! The headlining feature for this release is ...
16 votes
1 answer
441 views

Bug in the StackExchange Api ? getting "could not parse proxy url" when user not logged in

I think I may have stumbled upon a bug in the Stack Exchange JS API I'm having a problem getting its authentication to work properly, and I just discovered that the same problem exist in the official ...
Gabi Mor's user avatar
  • 301
16 votes
0 answers
111 views

Add a dedicated bot login to Stack Apps

When dealing with chat bots, especially those like SmokeDetector, you'll often want to log in directly from the code. The problem? There's no easy way to do this, especially now that Open ID is being ...
Mithical's user avatar
  • 299
15 votes
1 answer
2k views

Unable to get access token

I am trying to get a non-expiry access token, like so: https://stackexchange.com/oauth?scope=no_expiry&redirect_uri={{some_uri}}&client_id={{some_value}} I am repeatedly getting the error: ...
user34257's user avatar
  • 185
9 votes
1 answer
797 views

Getting "application not configured for implicit grants" error trying to setup website

I had a developer setup StackExchange auth for a site last year and that still works fine. I have cloned that site and am in the process of changing out all of the relevant names and keys to the new ...
Lizza's user avatar
  • 193
8 votes
2 answers
536 views

Getting unauthorized_error when using OAuth2.0

I want to create a simple desktop application which connects to my account and shows some information in the status bar. I've been trying to authenticate using OAuth2.0 but I'm getting stuck and I ...
aalbagarcia's user avatar
8 votes
1 answer
796 views

How can I quickly get an access token for personal use?

Registering your application or script gets you a higher daily quota and is fairly simply; a step by step guide is documented here: I only need a key, what do I do? However, what if I do want an ...
Glorfindel's user avatar
  • 6,762
7 votes
1 answer
688 views

OAuth procedure for standalone user?

Background: I will be using the Stack Exchange API to make queries to stack overflow for a list of questions along with their details for a particular month etc for analysis purposes. So this would be ...
Viraj's user avatar
  • 173
7 votes
1 answer
515 views

No website (yet), how to register?

I just started developing a Stack Overflow client, and wanted to add authentication. I found out I needed to register for that and wasn't sure if it was okay to register your app when it is not yet ...
11684's user avatar
  • 123
7 votes
1 answer
680 views

Application Key and AccessToken are not working for Stack Exchange API? [duplicate]

I have followed the documentation and used explicit OAuth 2.0 flow for access_token generation. And I have gone through all 4 steps defined under explicit OAuth 2.0 flow with scope=no_expiry. Then I ...
Sanjiv's user avatar
  • 325
7 votes
1 answer
254 views

DSS: Facilitating API authentication for desktop apps

desktop-stack-serv Auth server for desktop applications authenticating with the Stack Exchange API. What? The Stack Exchange API enables applications to get data about Stack Exchange sites or users....
ArtOfCode's user avatar
  • 473
6 votes
1 answer
130 views

Does a closed and/or deleted Stack Apps post still provide access to the API?

Registering your application as a Stack Apps app is necessary in order to obtain a higher request quota, authentication and write access to the API. What happens if the question is closed because of ...
Glorfindel's user avatar
  • 6,762
6 votes
1 answer
9k views

'The target origin provided does not match the recipient window's origin' message when trying to use localhost

I am trying to experiment with the Stack Overflow API on my localhost and am struggling to get the authentication to complete. Here is my application JavaScript code (note that I am using IBM ...
MDalt's user avatar
  • 161
6 votes
0 answers
424 views

Resurfacing bug: "could not parse proxy url" error message

According to this question, the "could not parse proxy url" bug was solved more than 2 years ago. However, when using the client-side OAuth flow, the aforementioned error message appears when ...
Linostar's user avatar
  • 161
6 votes
0 answers
233 views

localhost API key receives Curl error when retrieving access token

I have registered two apps -- one that will redirect to my website and the other that will redirect to a localhost server that I have running so I don't have to test my code on the site. I have ...
austin's user avatar
  • 171
5 votes
1 answer
108 views

Access token keeps being invalidated

For Stack Overflow Extras (SOX), a few users and myself have seen our access tokens being invalidated very often without any apparent reason. We aren't requesting new tokens (which would invalidate ...
ᔕᖺᘎᕊ's user avatar
  • 4,365
5 votes
1 answer
146 views

Is there a way to specify how long I want an access token to be valid for?

I am following the explicit authentication path. I am not passing no_expiry as part of the scope. After the final POST step, I receive back an expires value of 86399 (just shy of a full day). It ...
Andy's user avatar
  • 417
5 votes
1 answer
154 views

Do the terms "key" and "access_token" refer to the same thing?

I'm trying to get my head around all the limits and throttles but some terminology is confusing me: If an application does not have an access_token, then the application shares an IP based quota ...
hippietrail's user avatar
5 votes
1 answer
2k views

Desktop login URL: WebBrowser hangs (.NET) - JavaScript endless-loop

I am using .NET 4 and trying to use the desktop authentication via the web-browser control (WPF and/or WinForms; StackApp NNTP bridge for accessing StackExchange forums (like StackOverflow)). It seems ...
Jochen Kalmbach's user avatar
4 votes
1 answer
449 views

Refresh expired acess token basics

I'm trying to learn how to implement an OAuth flow in an Android app using a simple app with the Stack Exchange API. Using WebView, I'm able to retrieve an access token and store it in my shared ...
Marco Pierucci's user avatar
4 votes
1 answer
283 views

Can not request info after OAuth

I am following The implicit OAuth 2.0 flow Guide: My client ID is 4709 while key is RoZwtHUrhMP088oVGCMlxA(( I appended my URL as: https://stackexchange.com/oauth/dialog?client_id=4709&scope=...
Zigii Wong's user avatar
4 votes
1 answer
108 views

After user login, how do you ask user for permissions?

For an app on Windows Phone, I'm missing the page after you enter your login credentials and click submit. When I debug on my device, after I log in I obtain the correct response Uri with access ...
erotavlas's user avatar
  • 229
4 votes
1 answer
143 views

How to use /me to display my profile data in StackExchange API?

So I'm able to use API calls like: https://api.stackexchange.com/2.2/questions?pagesize=30&order=desc&sort=activity&site=stackoverflow to display a list of questions. This is easy as it ...
noogui's user avatar
  • 165
4 votes
1 answer
334 views

Login using Google fails saying OpenID 2.0 accounts for Google has gone away

Recently I have received complaints about my app suggesting that logging in with a Google account shows a warning message that OpenID authentication has gone away. When I tried to log in with my own ...
Birkan Cilingir's user avatar
4 votes
1 answer
2k views

API Implicit Authentication with Python

I am working on an desktop inbox notifier for StackOverflow, using the API with Python. The script I am working on first logs the user in on StackExchange, and then requests authorisation for the ...
neydroydrec's user avatar
4 votes
0 answers
55 views

OAuth Dialog has all content positioned off-screen

When using https://stackoverflow.com/oauth/dialog, the OAuth dialog renders correctly on my normal browser window. Opening it inside a modal however results in an empty window, because body has a min-...
NikxDa's user avatar
  • 141
4 votes
0 answers
154 views

Can we specify more than one OAuth Domain?

I would like to use the API from a browser extension. With WebExtensions, I should be able to support Firefox and Chrome with the same code. Chrome provides an identity API for OAuth2, and so does ...
Bob's user avatar
  • 286
3 votes
1 answer
101 views

Cannot get redirect_uri to work

This is in regards to my userscript Bulk flag comments. I am sure I have not at all updated the userscript since the first release of June 24, and I am sure I was able to register for an access token ...
Gaurang Tandon's user avatar
3 votes
1 answer
97 views

Accessing the Stack Exchange API not on behalf of an user? [duplicate]

I'm implementing an App and intend to use Stack Exchange tags to classify content, of course, respecting the terms of use. However, the Authentication documentation says I'd need to use the OAuth 2.0 ...
André Pena's user avatar
3 votes
1 answer
375 views

iOS Client for stackoverflow always throws redirect_uri not a valid uri

I tried to use the Stack Exchange API to authenticate the user. I have registered my app with redirect_uri as stackexchange.com/oauth/login_success. But it always throws "redirect_uri is not a valid ...
Kishorekumar E K's user avatar
3 votes
1 answer
524 views

Receiving error "Unexpected domain on proxy URL"

I am currenty trying to write my first ever stack exchange application and was using the SE Jaavascript SDK v 2.0 for this purpose. I am stuck on the point of authenticating the user. I followed the ...
Prahalad Deshpande's user avatar
3 votes
1 answer
275 views

Same access token between different fetch_token requests

TL;DR: Is it (or would it be) possible to get the same access_token from one fetch_token request to another, provided that the user is the same? Scenario: An anonymous user authenticates with Stack ...
Jivan's user avatar
  • 141
3 votes
1 answer
57 views

What are the possible errors returned from authentication?

The title pretty much says it all, I couldn't find in the Authentication doc much about the errors (other than the HTTP code will be 400)?
Jonathan.'s user avatar
  • 3,128
3 votes
1 answer
173 views

How to provide a logout button for authentication?

How would you provide a logout button for an app that uses authentication. (Not so that the user has to choose to accept or reject the app, that's deleting the app from their tab) Basically force the ...
Jonathan.'s user avatar
  • 3,128
3 votes
1 answer
241 views

Localhost test Stack App authentication: error 'redirect_uri' does not match

I tried the answer at "Can the redirect_uri contain port number"? But I am getting the following error: Provided redirect_uri does not match the redirect_uri this code was created with My access ...
sylor_huang's user avatar
3 votes
1 answer
114 views

Is developing, with the Stack Exchange API, possible on my local machine?

I'm sorry if this question seems trivial for the most of you but I'm not very familiar with OAuth and the Stack Exchange API. Is it possible to use this API in local environment for the development ...
Djouuuuh's user avatar
  • 173
3 votes
0 answers
240 views

Login screen without web browser

I'm playing around with the Stack Exchange API, and have just received my first response from the server using the "Hello World" example. The next step is to allow the user to log in somehow. From ...
Mitch's user avatar
  • 131
3 votes
0 answers
105 views

error description: could not parse proxy url

I have seen the answers to the existing two questions on this topic but it has not helped. And the problem still persists so I am re-posting this question. Here is my code $(function(){ SE.init({ ...
SOUPTIK BANERJEE's user avatar
2 votes
2 answers
203 views

User "authentication" (validation?) in V1 of the StackExchange API

In a previous question, it was asked whether it is possible to authenticate a user through the Stackoverflow API? The short answer was no, not until version 2. Now I would like to know: is there any ...
Herman Schaaf's user avatar
2 votes
1 answer
94 views

the stack exchange javascript library is 404

the library listed on the doc page for Authentication https://api.stackexchange.com/js/2.0/all.js ultimately redirects to https://api-v2cdn.sstatic.net/js/all.js which results in varying degrees ...
Sky Sanders's user avatar
  • 12.1k
2 votes
1 answer
338 views

"Could not parse uri [redirect_uri]" when trying to authenticate

I was just reading into this API and wanted to test it out before I would use it in a project. I have added an application on this site and got all of the keys. When I try to authenticate a user with ...
Chiel's user avatar
  • 85
2 votes
1 answer
60 views

I have created a lot of access_token with no_expiry scope while experimenting. How do I delete them?

While learning how to work with the StackApps APIs, I created quite a few (more than 10) access_token with no_expiry scope. Finally I have got my applicaiton working but I am worried that all those ...
jar's user avatar
  • 123
2 votes
1 answer
152 views

Can you identify a user from the access_token?

I have the access_token after authentication from the user. At this point I don't know with which sites this user has registered. Is it possible to get user information like the display name or ...
aldrin's user avatar
  • 155
2 votes
1 answer
66 views

How can I re-authenticate StackAlert Addon

Recently I removed StackAlert Firefox addon from my apps list in StackExchange. Now when I reinstall it, it is not authenticating and giving message key is not valid for passed access_token.. How ...
Ravindra Gullapalli's user avatar
2 votes
1 answer
138 views

How do I add a comment to a post through the Stack Exchange API?

I want to add an comment to a specific post so, how do I get its ID and how do I authorize it. I want it to done through the Stack Exchange API interface.
Mohammed Noman Razvi's user avatar
2 votes
1 answer
100 views

The new implicit authentication dialog doesn't handle comma-delimited scopes

The authentication docs state that the scopes parameter of the URL to which a user should be directed to, for implicit authentication, should be a list of scopes that are delimited by either commas or ...
ravindUwU's user avatar
  • 319
2 votes
1 answer
193 views

Stack Exchange login hangs on Windows 10 Mobile?

I am working on a Stack Exchange App (Stack App for Windows 10 PC/Mobile and Windows 8.1 Mobile). I have a user login set up and using the WebAuthenticationBroker in Universal Windows Platform, to ...
AVK's user avatar
  • 279
2 votes
1 answer
107 views

Authentication uses # instead of `?`?

I need authentication for my app so I used the implicit flow way. The authentication works just fine but the access_token and expires variables return weirdly! For example: https://example.com/#...
moein rahimi's user avatar
2 votes
1 answer
190 views

"client_id rejected" error when retrieving the access_token

I'm developing an application in C# and I to post questions, so I need an access token. I registered my application and I have received a client ID. Then I get the following query-string to get the ...
user2621858's user avatar
2 votes
1 answer
122 views

Not possible to login to approve or reject access to application on Windows Phone 7 device

I'm making an app for Windows Phone using the Stack Exchange API but I'm having a bit of trouble when I try to let the user approve the application (using client side flow). I open a web browser at ...
Spencerooni's user avatar