Questions tagged [oauth2]

For questions relating to authenticating with the Stack Exchange API using OAuth 2.0, which is an open standard for authorization. General OAuth 2.0 questions are off-topic but might find a home elsewhere in the network.

Filter by
Sorted by
Tagged with
18 votes
1 answer
5k views

What is an oAuth domain

What is the oAuth domain that is mentioned in the StackApps app registration form? I googled it but couldn't find a good description.
Binoy Babu's user avatar
15 votes
1 answer
2k views

Unable to get access token

I am trying to get a non-expiry access token, like so: https://stackexchange.com/oauth?scope=no_expiry&redirect_uri={{some_uri}}&client_id={{some_value}} I am repeatedly getting the error: ...
user34257's user avatar
  • 185
12 votes
2 answers
5k views

Can the redirect_uri contain port number?

Is it possible to have the redirect_uri contain a specific port? For example: example.com:8080 Assuming that example.com is my registered domain, is the 8080 allowed? I have tried to put it as part ...
Andy's user avatar
  • 417
12 votes
2 answers
1k views

Sanction - An OAuth 2.0 implementation

Code Snippet from sanction.client import Client from sanction.adapters.google import Google client = Client(Google, { "google.client_id": "myclientid", "google.client_secret": "...
Demian Brecht's user avatar
11 votes
1 answer
356 views

Google’s OAuth redirect broken

We just tried to authenticate with our application without being logged into anything on StackExchange. This is best tested in a private browser session without any cookies etc. So after starting the ...
poke's user avatar
  • 707
10 votes
1 answer
3k views

What exactly is a valid OAuth domain name for registering your app?

I'm starting to write a native Android client for Stack Overflow, and wondering what exactly is a valid OAuth domain name? Is it the package name of my app? Or do I have to point it to a server ...
CodeRed's user avatar
  • 101
9 votes
1 answer
797 views

Getting "application not configured for implicit grants" error trying to setup website

I had a developer setup StackExchange auth for a site last year and that still works fine. I have cloned that site and am in the process of changing out all of the relevant names and keys to the new ...
Lizza's user avatar
  • 193
9 votes
1 answer
204 views

What to do with "OAuth Domain" in the registration page for a browser user script?

I want to register my first project so I can make more API calls without hitting the limit now that it seems to be good enough for others to use. My project is a browser userscript that works with ...
hippietrail's user avatar
9 votes
0 answers
6k views

sanction: a dead easy OAuth2 client Python implementation

Overview sanction is a lightweight, dead simple (67 LOC!) client implementation of the OAuth2 protocol. The major goals of the library are: Support multiple providers Most providers have varying ...
Demian Brecht's user avatar
8 votes
2 answers
536 views

Getting unauthorized_error when using OAuth2.0

I want to create a simple desktop application which connects to my account and shows some information in the status bar. I've been trying to authenticate using OAuth2.0 but I'm getting stuck and I ...
aalbagarcia's user avatar
8 votes
1 answer
795 views

How can I quickly get an access token for personal use?

Registering your application or script gets you a higher daily quota and is fairly simply; a step by step guide is documented here: I only need a key, what do I do? However, what if I do want an ...
Glorfindel's user avatar
  • 6,762
6 votes
1 answer
84 views

As a user, where in the web UI could I find all the tokens I have granted for Stack Apps?

I want to manage or revoke access tokens I have granted to 3rd party Stack Apps, but I have a hard time to find them in the UI.
steveyang's user avatar
  • 163
6 votes
1 answer
185 views

JavaScript SDK-based workflow never pushes message back from OAuth login_success page on Stack Exchange side

I'm using the JavaScript SDK by Stack Exchange provided with the latest API, and despite following the official instructions & examples it doesn't work - it seems there is a bug which breaks the ...
Mikhail Vink's user avatar
5 votes
1 answer
108 views

Access token keeps being invalidated

For Stack Overflow Extras (SOX), a few users and myself have seen our access tokens being invalidated very often without any apparent reason. We aren't requesting new tokens (which would invalidate ...
ᔕᖺᘎᕊ's user avatar
  • 4,365
5 votes
1 answer
146 views

Is there a way to specify how long I want an access token to be valid for?

I am following the explicit authentication path. I am not passing no_expiry as part of the scope. After the final POST step, I receive back an expires value of 86399 (just shy of a full day). It ...
Andy's user avatar
  • 417
5 votes
1 answer
268 views

Cannot authenticate with OAuth2

I was testing an app and suddenly I can't login any more. Neither my app or the Stack App configuration hasn't changed, so I'm thinking this might be a bug on the API side. The OAuth error seems a ...
gion_13's user avatar
  • 161
5 votes
0 answers
141 views

Stackexchange oauth2.0 is suddenly failing

No changes in stack apps or my code, it was working fine for a while, suddenly it stopped working now. I get "InternalOAuthError: Failed to obtain access token" After more details inspection,...
Leart Beqiraj's user avatar
5 votes
1 answer
489 views

Issue with JavaScript SDK

When using the JavaScript SDK to enable client side OAuth flow, I'm running into this issue: Uncaught TypeError: Cannot read properties of null (reading 'postMessage') And the page gets stuck with the ...
Sourabh Choraria's user avatar
4 votes
1 answer
559 views

Javascript SDK channelUrl for local development [duplicate]

I am trying to get started with the Javascript SDK. I am developing on a web server on my local machine. I get a channelUrl-related error when calling SE.init. My code: SE.init({ clientId: ...
joews's user avatar
  • 149
4 votes
1 answer
545 views

Creating personal applications using Stack Overflow/Stack Exchange API

I want to create an application to read Stack Overflow notifications on my device. My question: what should I provide in the OAuth Domain and Application website fields while registering the ...
user avatar
4 votes
1 answer
449 views

Refresh expired acess token basics

I'm trying to learn how to implement an OAuth flow in an Android app using a simple app with the Stack Exchange API. Using WebView, I'm able to retrieve an access token and store it in my shared ...
Marco Pierucci's user avatar
4 votes
1 answer
283 views

Can not request info after OAuth

I am following The implicit OAuth 2.0 flow Guide: My client ID is 4709 while key is RoZwtHUrhMP088oVGCMlxA(( I appended my URL as: https://stackexchange.com/oauth/dialog?client_id=4709&scope=...
Zigii Wong's user avatar
4 votes
1 answer
82 views

Find out whether a user has association bonus

I searched for this in the api docs and on this page but couldn't find any information: I have an api token of a given user. Is there a way to find out whether this user has association bonus rights? ...
MEE's user avatar
  • 141
4 votes
1 answer
523 views

`redirect_uri` is not under the registered domain for this application

I am trying to implement Stack Exchange authorization in my RoR application. But I get the error : redirect_uri is not under the registered domain for this application in Gemfile use: gem '...
nobody 's user avatar
4 votes
1 answer
143 views

How to use /me to display my profile data in StackExchange API?

So I'm able to use API calls like: https://api.stackexchange.com/2.2/questions?pagesize=30&order=desc&sort=activity&site=stackoverflow to display a list of questions. This is easy as it ...
noogui's user avatar
  • 165
4 votes
1 answer
334 views

Login using Google fails saying OpenID 2.0 accounts for Google has gone away

Recently I have received complaints about my app suggesting that logging in with a Google account shows a warning message that OpenID authentication has gone away. When I tried to log in with my own ...
Birkan Cilingir's user avatar
4 votes
1 answer
2k views

API Implicit Authentication with Python

I am working on an desktop inbox notifier for StackOverflow, using the API with Python. The script I am working on first logs the user in on StackExchange, and then requests authorisation for the ...
neydroydrec's user avatar
4 votes
1 answer
333 views

Getting an API key for an application without a server

When I go to register my application, it asks me my OAUTH application URL. But I don't have an OAuth server and I just want to get the api-key without my server. How can I fill out the form required ...
KYHSGeekCode's user avatar
4 votes
0 answers
55 views

OAuth Dialog has all content positioned off-screen

When using https://stackoverflow.com/oauth/dialog, the OAuth dialog renders correctly on my normal browser window. Opening it inside a modal however results in an empty window, because body has a min-...
NikxDa's user avatar
  • 141
4 votes
0 answers
154 views

Can we specify more than one OAuth Domain?

I would like to use the API from a browser extension. With WebExtensions, I should be able to support Firefox and Chrome with the same code. Chrome provides an identity API for OAuth2, and so does ...
Bob's user avatar
  • 286
4 votes
0 answers
601 views

What should I put in redirect_uri for implicit OAuth 2.0

From the document I can't figure out what value should I put in redirect_uri if I want to implement iPhone app. I try https://stackexchange.com/oauth/login_success but it not work and show this error ...
art's user avatar
  • 141
4 votes
0 answers
104 views

Implicit OAuth Flow stopped working. Redirect happening to a non existent URL [duplicate]

The following URL is first hit when a user clicks on Login: https://stackexchange.com/oauth/dialog?client_id=202&redirect_uri=https%3a%2f%2fstackexchange.com%2foauth%2flogin_success&scope=...
Prasanna's user avatar
  • 348
3 votes
1 answer
146 views

Is it possible to register V2.0 apps that are not web apps?

I want to register an app that will use the V2.0 API here: https://stackapps.com/apps/oauth/register. However, the app will run on a mobile phone so I cannot enter a domain name. What can I possibly ...
user avatar
3 votes
1 answer
152 views

Suddenly getting "Couldn't parse `client_id`"

For years, I've run a local PHP app using GuzzleHttp\Client to download my StackExchange posts. Today, I'm suddenly getting this problem when posting my client_id, client_secret, code, redirect_uri. { ...
Ryan's user avatar
  • 131
3 votes
1 answer
101 views

Cannot get redirect_uri to work

This is in regards to my userscript Bulk flag comments. I am sure I have not at all updated the userscript since the first release of June 24, and I am sure I was able to register for an access token ...
Gaurang Tandon's user avatar
3 votes
1 answer
2k views

Implicit OAuth flow puts the access token in the hash?

The implicit OAuth flow puts the access token in the hash. However, I would like to get that in the query (from example.com/hi#access_token=123456 to example.com/hi?access_token=123456) for it to work ...
user avatar
3 votes
1 answer
375 views

iOS Client for stackoverflow always throws redirect_uri not a valid uri

I tried to use the Stack Exchange API to authenticate the user. I have registered my app with redirect_uri as stackexchange.com/oauth/login_success. But it always throws "redirect_uri is not a valid ...
Kishorekumar E K's user avatar
3 votes
1 answer
120 views

Help with javascript SDK configuration

The following problem is REAL! All names have been changed to protect the innocent. I have a site at "http://Something.github.io/MyRepository/Directory/index.html" And I have my app configured like ...
Jack Sprat's user avatar
3 votes
1 answer
391 views

"OAuth request must be over HTTPS" when request is over https

I had a bug reported to me that I was able to reproduce. When authorizing to my Badges webapp, we get the following error: error: invalid_request error description: OAuth request must be over ...
agent86's user avatar
  • 3,277
3 votes
1 answer
274 views

Same access token between different fetch_token requests

TL;DR: Is it (or would it be) possible to get the same access_token from one fetch_token request to another, provided that the user is the same? Scenario: An anonymous user authenticates with Stack ...
Jivan's user avatar
  • 141
3 votes
1 answer
131 views

Permission request form is broken, approve button is hidden, css variables are missing

You can check that form doesn't work with this link https://stackoverflow.com/oauth?client_id=17581&scope=no_expiry&redirect_uri=http://functional.localdomain:3449/login/github
Yanis Urbis's user avatar
3 votes
1 answer
241 views

Localhost test Stack App authentication: error 'redirect_uri' does not match

I tried the answer at "Can the redirect_uri contain port number"? But I am getting the following error: Provided redirect_uri does not match the redirect_uri this code was created with My access ...
sylor_huang's user avatar
3 votes
1 answer
114 views

Is developing, with the Stack Exchange API, possible on my local machine?

I'm sorry if this question seems trivial for the most of you but I'm not very familiar with OAuth and the Stack Exchange API. Is it possible to use this API in local environment for the development ...
Djouuuuh's user avatar
  • 173
3 votes
1 answer
337 views

Stack Exchange OAuth2, explicit access-token response format does not adhere to RFC6749 standard

I'm using the Stack Exchange v2.1 API. I'm using the explicit OAuth 2.0 flow, but it seems that the access token response step does not adhere to the RFC 6749 standard. Specifically, the Stack ...
Wu-Man's user avatar
  • 131
3 votes
1 answer
4k views

OAuth redirect not completing

This is the URL that I'm entering (in Safari, cleared website data and cache; my app, uses own Cookie jar; and incognito chrome) https://stackexchange.com/oauth/dialog?client_id=23&scope=...
Jonathan.'s user avatar
  • 3,128
3 votes
1 answer
642 views

Redirect URI for a chrome extension using StackExchange API Oauth

I'm working on a developing a browser extension which uses StackExchange API authentication. I was able to successfully implement the authentication for Microsoft edge/Chrome when I added chromiumapp....
Gangula's user avatar
  • 171
3 votes
0 answers
102 views

PLACEHOLDER - VosMottor's Bot

Just creating a bot for Stack Exchange. I just started so far.
USERNAME GOES HERE's user avatar
3 votes
0 answers
240 views

Login screen without web browser

I'm playing around with the Stack Exchange API, and have just received my first response from the server using the "Hello World" example. The next step is to allow the user to log in somehow. From ...
Mitch's user avatar
  • 131
3 votes
0 answers
94 views

Is it safe to change the OAuth Domain?

I'm about to develop a small application that will use the Stack Exchange API. I understand that I have to provide an OAuth Domain when I register the application with Stack Exchange. Right now, I am ...
Kal's user avatar
  • 193
3 votes
0 answers
154 views

OAuth Dialog rendering problems in iPad

I'm using the implicit OAuth flow for our native iPad app. We're calling the standard URLs in a UIWebView. The Stack Exchange login renders with several UI glitches. The first screen looks correct: (...
bromanko's user avatar
  • 489