I am following The implicit OAuth 2.0 flow Guide:

My client ID is 4709 while key is RoZwtHUrhMP088oVGCMlxA((

I appended my URL as:


and trying to oauth.

And I got this URL as returned:

I notice that I*SJDoi6W(TUAz2BRCEzbw)) is the access_token.

When I try to call the request as this answer of my question .

So I call


Unfortunately, I got 403 Error:

{"error_id":403,"error_message":"key is not valid for passed access_token, token not found.","error_name":"access_denied"}

Any Idea?

1 Answer 1


Your second call must be https:.

You actually got an error like:

"error_message":"Access token sent over non-HTTPS request, it has been invalidated",

On the first attempt.

Only subsequent attempts, with the same token, would yield the 'key' is not valid for passed 'access_token' error.

When I call:


And get:


and then call:


It works for me. (Before I invalidated the token, that is. ;) )

  • That's exactly!
    – Zigii Wong
    Commented May 5, 2015 at 9:43
  • So if I try second attempts, I will get a 403 error? How to avoid it cause I don't want to access a single access_token again for per request.
    – Zigii Wong
    Commented May 5, 2015 at 9:58
  • No, you'll only get the 403 because you got the previous 406 error. Just keep everything on https: and you'll be okay. Commented May 5, 2015 at 10:09

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .