Questions tagged [oauth2]

For questions relating to authenticating with the Stack Exchange API using OAuth 2.0, which is an open standard for authorization. General OAuth 2.0 questions are off-topic but might find a home elsewhere in the network.

Filter by
Sorted by
Tagged with
0
votes
0answers
6 views

How to automate StackApp user approve and user login with stack Exchange explicit oAuth2.0

We are developing an stack App and integrating the app in our application. However we have successfully done a POC over POSTMAN and fiddler for explicit oAuth2.0. Now when we are integrating the same ...
0
votes
1answer
21 views

How to get access_token from the uri after the fetch function executes?

I am using this snippet to authorize to the Stack Exchange API const baseUrl = "https://stackexchange.com/oauth/dialog?client_id=17823&scope=read_inbox,no_expiry&redirect_uri=https://...
1
vote
1answer
162 views

Creating personal applications using Stack Overflow/Stack Exchange API

I want to create an application to read Stack Overflow notifications on my device. My question: what should I provide in the OAuth Domain and Application website fields while registering the ...
0
votes
0answers
17 views

OAuth implicit login dialog layout on Mobile Safari needs improvement

On mobile safari (iOS 13.3.1) the layout of the dialog page could be improved. On opening the page look like this on an iPhone11: The reasoning being this request is that the login dialog in the ...
3
votes
0answers
30 views

Permission request form is broken, approve button is hidden, css variables are missing

You can check that form doesn't work with this link https://stackoverflow.com/oauth?client_id=17581&scope=no_expiry&redirect_uri=http://functional.localdomain:3449/login/github
3
votes
1answer
77 views

Cannot authenticate with OAuth2

I was testing an app and suddenly I can't login any more. Neither my app or the Stack App configuration hasn't changed, so I'm thinking this might be a bug on the API side. The OAuth error seems a ...
1
vote
1answer
242 views

“client_id not provided” when trying to obtain an access_token

So I'm trying to authenticate with the v2 API via oauth2. I have a code, so I'm POSTing to https://stackexchange.com/oauth/access_token and ideally get an access_token back. Instead I get an ...
0
votes
0answers
40 views

Is it possible to configure authorization on localhost?

I registered an application that I want to check on localhost. From the client, I send the following request: My system: Node.js My localhost app port: 8888 My app settings: OAuth Domain ...
1
vote
0answers
34 views

Trying to get Stack Overflow Access token Using “RestAssured”

I have been trying to create an access token for a Stack Exchange app (already created). I am not even sure if I am using the correct URL https://stackoverflow.com/oauth/access_token. RestAssured....
10
votes
2answers
1k views

Sanction - An OAuth 2.0 implementation

Code Snippet from sanction.client import Client from sanction.adapters.google import Google client = Client(Google, { "google.client_id": "myclientid", "google.client_secret": "...
0
votes
0answers
27 views

Error invalid_request “OAuth request must be over HTTPS” when starting oauth flow

I'm building an application on top of StackExchange's API for a month now. While I was building the OAuth flow to allow users to authenticate using their StackExchange account, everything was working ...
1
vote
0answers
27 views

Passing `networkUsers: true` to the `authenticate` method returns `bad_barameter` error

Following the steps provided in the docs to authenticate to stackexchange via the js sdk api, I'm unable to authenticate if I pass the networkUsers: true to the auth call. I'm getting the following ...
1
vote
1answer
88 views

How to register a Stack App with explicit OAuth 2.0 flow to a third party site?

I am about to integrate a Stack Overflow app to a third party website / integration service (Zoho). The third party website's documentation mentioned that the redirect URL is https://deluge.zoho.com/...
1
vote
1answer
95 views

access_token not present in /oauth/access_token response

When using the explicit OAuth authentication for apps, I have problems receiving the access_token. A user goes to /approve and is then forwarded to approve the app. When redirected back to my site I ...
4
votes
1answer
242 views

Can not request info after OAuth

I am following The implicit OAuth 2.0 flow Guide: My client ID is 4709 while key is RoZwtHUrhMP088oVGCMlxA(( I appended my URL as: https://stackexchange.com/oauth/dialog?client_id=4709&scope=...
2
votes
1answer
107 views

Localhost test Stack App authentication: error 'redirect_uri' does not match

I tried the answer at "Can the redirect_uri contain port number"? But I am getting the following error: Provided redirect_uri does not match the redirect_uri this code was created with My access ...
0
votes
1answer
489 views

How to get access token from the hash?

I am trying to implement OAuth Stack Exchange API via Android app as client. After a successful login from out I get the below URL how do I get or decode the access_token from the hash? https://...
2
votes
1answer
1k views

Implicit OAuth flow puts the access token in the hash?

The implicit OAuth flow puts the access token in the hash. However, I would like to get that in the query (from example.com/hi#access_token=123456 to example.com/hi?access_token=123456) for it to work ...
3
votes
0answers
145 views

OAuth Dialog rendering problems in iPad

I'm using the implicit OAuth flow for our native iPad app. We're calling the standard URLs in a UIWebView. The Stack Exchange login renders with several UI glitches. The first screen looks correct: (...
3
votes
1answer
204 views

`redirect_uri` is not under the registered domain for this application

I am trying to implement Stack Exchange authorization in my RoR application. But I get the error : redirect_uri is not under the registered domain for this application in Gemfile use: gem '...
1
vote
1answer
126 views

OAuth redirect_uri to https://stackexchange.com/oauth/login_success?xxx strips part of the query string

I have a browser extension that uses OAuth2 to retrieve an access token. As recommended by https://api.stackexchange.com/docs/authentication, I use https://stackoverflow.com/oauth/login_success as the ...
2
votes
1answer
85 views

The new implicit authentication dialog doesn't handle comma-delimited scopes

The authentication docs state that the scopes parameter of the URL to which a user should be directed to, for implicit authentication, should be a list of scopes that are delimited by either commas or ...
5
votes
1answer
65 views

Find out whether a user has association bonus

I searched for this in the api docs and on this page but couldn't find any information: I have an api token of a given user. Is there a way to find out whether this user has association bonus rights? ...
5
votes
1answer
71 views

As a user, where in the web UI could I find all the tokens I have granted for Stack Apps?

I want to manage or revoke access tokens I have granted to 3rd party Stack Apps, but I have a hard time to find them in the UI.
4
votes
0answers
41 views

OAuth Dialog has all content positioned off-screen

When using https://stackoverflow.com/oauth/dialog, the OAuth dialog renders correctly on my normal browser window. Opening it inside a modal however results in an empty window, because body has a min-...
13
votes
1answer
2k views

Unable to get access token

I am trying to get a non-expiry access token, like so: https://stackexchange.com/oauth?scope=no_expiry&redirect_uri={{some_uri}}&client_id={{some_value}} I am repeatedly getting the error: ...
2
votes
1answer
38 views

I have created a lot of access_token with no_expiry scope while experimenting. How do I delete them?

While learning how to work with the StackApps APIs, I created quite a few (more than 10) access_token with no_expiry scope. Finally I have got my applicaiton working but I am worried that all those ...
-2
votes
1answer
219 views

“text/plain” content type header for x-www-form-urlencoded content? [duplicate]

I'm getting the following response body and header from https://stackoverflow.com/oauth/access_token when attempting to exchange an oauth code for a token: <DEBUG> [00:30:03] my-app - content-...
3
votes
1answer
217 views

Stack Exchange OAuth2, explicit access-token response format does not adhere to RFC6749 standard

I'm using the Stack Exchange v2.1 API. I'm using the explicit OAuth 2.0 flow, but it seems that the access token response step does not adhere to the RFC 6749 standard. Specifically, the Stack ...
10
votes
2answers
3k views

Can the redirect_uri contain port number?

Is it possible to have the redirect_uri contain a specific port? For example: example.com:8080 Assuming that example.com is my registered domain, is the 8080 allowed? I have tried to put it as part ...
3
votes
1answer
78 views

Cannot get redirect_uri to work

This is in regards to my userscript Bulk flag comments. I am sure I have not at all updated the userscript since the first release of June 24, and I am sure I was able to register for an access token ...
3
votes
1answer
1k views

What exactly is a valid OAuth domain name for registering your app?

I'm starting to write a native Android client for Stack Overflow, and wondering what exactly is a valid OAuth domain name? Is it the package name of my app? Or do I have to point it to a server ...
1
vote
1answer
445 views

oauth 2.0 based on stackexchange api and fetch user details

I am new to oauth 2.0. What i am trying to achieve is following I have a google api based oauth authentication in place On top I fetch the gmail email address and verify if this address is present in ...
3
votes
1answer
491 views

Javascript SDK channelUrl for local development [duplicate]

I am trying to get started with the Javascript SDK. I am developing on a web server on my local machine. I get a channelUrl-related error when calling SE.init. My code: SE.init({ clientId: ...
4
votes
1answer
194 views

Getting an API key for an application without a server

When I go to register my application, it asks me my OAUTH application URL. But I don't have an OAuth server and I just want to get the api-key without my server. How can I fill out the form required ...
3
votes
1answer
87 views

How to use /me to display my profile data in StackExchange API?

So I'm able to use API calls like: https://api.stackexchange.com/2.2/questions?pagesize=30&order=desc&sort=activity&site=stackoverflow to display a list of questions. This is easy as it ...
1
vote
0answers
51 views

Stack Exchange Javascript SDK implicit OAuth2 bugs in `SE.authenticate`

I've tried to set up an implicit authorization workflow with JavaScript SDK version 2.0: <script type='text/javascript' src='https://api.stackexchange.com/js/2.0/all.js'></script> I was ...
3
votes
0answers
67 views

Can we specify more than one OAuth Domain?

I would like to use the API from a browser extension. With WebExtensions, I should be able to support Firefox and Chrome with the same code. Chrome provides an identity API for OAuth2, and so does ...
4
votes
1answer
2k views

API Implicit Authentication with Python

I am working on an desktop inbox notifier for StackOverflow, using the API with Python. The script I am working on first logs the user in on StackExchange, and then requests authorisation for the ...
2
votes
1answer
85 views

Authentication uses # instead of `?`?

I need authentication for my app so I used the implicit flow way. The authentication works just fine but the access_token and expires variables return weirdly! For example: https://example.com/#...
1
vote
1answer
611 views

No 'Access-Control-Allow-Origin' for oauth/access_token

Following the Stack Apps documentation Authentication (explicit) section I crafted this AJAX call $.ajax({ url:"https://stackexchange.com/oauth/access_token", type:"...
0
votes
1answer
80 views

What token parameters to use for OAuth2 Authorizaton?

I'm trying to connect a piece of desktop software to the Stack Exchange web service through OAuth2. I've read the docs but the problem is that what it talks about is subtly different to what ...
5
votes
1answer
81 views

Access token keeps being invalidated

For Stack Overflow Extras (SOX), a few users and myself have seen our access tokens being invalidated very often without any apparent reason. We aren't requesting new tokens (which would invalidate ...
8
votes
1answer
159 views

What to do with “OAuth Domain” in the registration page for a browser user script?

I want to register my first project so I can make more API calls without hitting the limit now that it seems to be good enough for others to use. My project is a browser userscript that works with ...
6
votes
1answer
155 views

JavaScript SDK-based workflow never pushes message back from OAuth login_success page on Stack Exchange side

I'm using the JavaScript SDK by Stack Exchange provided with the latest API, and despite following the official instructions & examples it doesn't work - it seems there is a bug which breaks the ...
8
votes
2answers
475 views

Getting unauthorized_error when using OAuth2.0

I want to create a simple desktop application which connects to my account and shows some information in the status bar. I've been trying to authenticate using OAuth2.0 but I'm getting stuck and I ...