Questions tagged [oauth2]
For questions relating to authenticating with the Stack Exchange API using OAuth 2.0, which is an open standard for authorization. General OAuth 2.0 questions are off-topic but might find a home elsewhere in the network.
99 questions
0
votes
0
answers
30
views
Multiple Callback Domains with SE API?
In order to use the API, you have to have Callback APIs. They're not hard to implement, but there's still some headaches if you want to use more than one Callback endpoint.
For example, an ...
1
vote
0
answers
102
views
Propose Stack Overflow / Stack Exchange as OAuth provider to demo-eleventy-serverless-oauth
Screenshot / Code Snippet
About
Eleventy is a static website generator. On version 1 it added support for severless functions. During the beta, the Eleventy maintainer created a demo for using ...
7
votes
1
answer
297
views
Stackexchange oauth2.0 is suddenly failing
No changes in stack apps or my code, it was working fine for a while, suddenly it stopped working now.
I get "InternalOAuthError: Failed to obtain access token"
After more details inspection,...
5
votes
1
answer
356
views
Suddenly getting "Couldn't parse `client_id`"
For years, I've run a local PHP app using GuzzleHttp\Client to download my StackExchange posts.
Today, I'm suddenly getting this problem when posting my client_id, client_secret, code, redirect_uri.
{
...
0
votes
0
answers
30
views
how can i take write acces on stack overflow [duplicate]
const express = require("express");
const router = express.Router();
const axios = require("axios");
const querystring = require("querystring");
const dotenv = require(&...
2
votes
1
answer
157
views
Is there a way to use the API without using localhost or a web domain?
I'm developing an SO chrome extension in React with TypeScript.
I've been reading the guide on how to use the API with OAuth and it looks fantastic for what I'm trying to do.
The problem is that the ...
1
vote
1
answer
154
views
OAuth Domain can't satisfy redirect_uri AND Proxy url
Let's say I have an app called ExampleApp, with these details:
Client ID: 12345
Key: ThisIsTheKey123()
OAuth Domain: exampleapp.com
[√] Enable Client Side OAuth flow
[√] Disable ...
3
votes
1
answer
850
views
Redirect URI for a chrome extension using StackExchange API Oauth
I'm working on a developing a browser extension which uses StackExchange API authentication. I was able to successfully implement the authentication for Microsoft edge/Chrome when I added chromiumapp....
1
vote
1
answer
210
views
How to apply an access token in order to scrape the recommended answers?
I'm trying to scrape some data which needs the access token, and I received
'Applications must have a registered Stack Apps post to write'
Does that mean I need to post a question on Stack Exchange ...
5
votes
1
answer
644
views
Issue with JavaScript SDK
When using the JavaScript SDK to enable client side OAuth flow, I'm running into this issue: Uncaught TypeError: Cannot read properties of null (reading 'postMessage')
And the page gets stuck with the ...
8
votes
1
answer
1k
views
How can I quickly get an access token for personal use?
Registering your application or script gets you a higher daily quota and is fairly simply; a step by step guide is documented here: I only need a key, what do I do?
However, what if I do want an ...
1
vote
0
answers
58
views
StackExchange API explicit oauth2 json doesn't return status 400
It is said here that if the request failed, it will return error with HTTP status code 400 but I'm getting HTTP status code 200 even when it is returning an error.
I'm hitting https://stackoverflow....
1
vote
1
answer
113
views
App post got deleted
I'm currently writing an app using the Stack Exchange API.
Today I wanted to rework the login component, but after signing in I get the following message:
Application must have a registered Stack ...
3
votes
0
answers
104
views
PLACEHOLDER - VosMottor's Bot
Just creating a bot for Stack Exchange. I just started so far.
2
votes
0
answers
70
views
Can I have more than one OAuth Domain?
I tried to set more than one OAuth Domain, but seems to it's not working. I tried to set them separated by comma or space, but got redirect_uri - must be under an apps registered domain error message.
...
1
vote
0
answers
153
views
Use Stack Overflow's authentication API in a browser extension
I want to create a browser extension that reproduce the Stack Overflow navbar (inbox and achievements):
I need for that to authenticate the current user using the authentication API.
For this step, I ...
1
vote
0
answers
165
views
Having Trouble Setting Up OAuth for App
I am trying to build an app but I can't get the authentication right.
I have been following the steps here:
https://api.stackexchange.com/docs/authentication
I keep getting the below error no matter ...
1
vote
1
answer
3k
views
How can I use an iOS custom URL scheme as redirect_uri?
I am trying to implement OAuth using iOS URL schemes. For example if I provide myapp:// as redirect_uri the app should launch. However, I cannot add it as OAuth domain in the Stack Apps settings, as ...
1
vote
0
answers
52
views
How to automate StackApp user approve and user login with stack Exchange explicit oAuth2.0
We are developing an stack App and integrating the app in our application. However we have successfully done a POC over POSTMAN and fiddler for explicit oAuth2.0. Now when we are integrating the same ...
1
vote
1
answer
237
views
How to get access_token from the uri after the fetch function executes?
I am using this snippet to authorize to the Stack Exchange API
const baseUrl =
"https://stackexchange.com/oauth/dialog?client_id=17823&scope=read_inbox,no_expiry&redirect_uri=https://...
4
votes
1
answer
607
views
Creating personal applications using Stack Overflow/Stack Exchange API
I want to create an application to read Stack Overflow notifications on my device.
My question: what should I provide in the OAuth Domain and Application website fields while registering the ...
0
votes
0
answers
53
views
OAuth implicit login dialog layout on Mobile Safari needs improvement
On mobile safari (iOS 13.3.1) the layout of the dialog page could be improved.
On opening the page look like this on an iPhone11:
The reasoning being this request is that the login dialog in the ...
3
votes
1
answer
134
views
Permission request form is broken, approve button is hidden, css variables are missing
You can check that form doesn't work with this link https://stackoverflow.com/oauth?client_id=17581&scope=no_expiry&redirect_uri=http://functional.localdomain:3449/login/github
1
vote
0
answers
146
views
Trying to get Stack Overflow Access token Using "RestAssured"
I have been trying to create an access token for a Stack Exchange app (already created). I am not even sure if I am using the correct URL https://stackoverflow.com/oauth/access_token.
RestAssured....
0
votes
0
answers
83
views
Error invalid_request "OAuth request must be over HTTPS" when starting oauth flow
I'm building an application on top of StackExchange's API for a month now. While I was building the OAuth flow to allow users to authenticate using their StackExchange account, everything was working ...
5
votes
1
answer
281
views
Cannot authenticate with OAuth2
I was testing an app and suddenly I can't login any more.
Neither my app or the Stack App configuration hasn't changed, so I'm thinking this might be a bug on the API side.
The OAuth error seems a ...
1
vote
1
answer
357
views
How to register a Stack App with explicit OAuth 2.0 flow to a third party site?
I am about to integrate a Stack Overflow app to a third party website / integration service (Zoho).
The third party website's documentation mentioned that the redirect URL is https://deluge.zoho.com/...
2
votes
1
answer
2k
views
How to get access token from the hash?
I am trying to implement OAuth Stack Exchange API via Android app as client.
After a successful login from out I get the below URL how do I get or decode the access_token from the hash?
https://...
3
votes
1
answer
258
views
Localhost test Stack App authentication: error 'redirect_uri' does not match
I tried the answer at "Can the redirect_uri contain port number"?
But I am getting the following error:
Provided redirect_uri does not match the redirect_uri this code was created with
My access ...
4
votes
1
answer
665
views
`redirect_uri` is not under the registered domain for this application
I am trying to implement Stack Exchange authorization in my RoR application.
But I get the error :
redirect_uri is not under the registered domain for this application
in Gemfile use:
gem '...
1
vote
1
answer
235
views
OAuth redirect_uri to https://stackexchange.com/oauth/login_success?xxx strips part of the query string
I have a browser extension that uses OAuth2 to retrieve an access token. As recommended by https://api.stackexchange.com/docs/authentication, I use https://stackoverflow.com/oauth/login_success as the ...
4
votes
1
answer
84
views
Find out whether a user has association bonus
I searched for this in the api docs and on this page but couldn't find any information:
I have an api token of a given user. Is there a way to find out whether this user has association bonus rights?
...
4
votes
0
answers
57
views
OAuth Dialog has all content positioned off-screen
When using https://stackoverflow.com/oauth/dialog, the OAuth dialog renders correctly on my normal browser window. Opening it inside a modal however results in an empty window, because body has a min-...
2
votes
1
answer
63
views
I have created a lot of access_token with no_expiry scope while experimenting. How do I delete them?
While learning how to work with the StackApps APIs, I created quite a few (more than 10) access_token with no_expiry scope. Finally I have got my applicaiton working but I am worried that all those ...
-3
votes
1
answer
930
views
"text/plain" content type header for x-www-form-urlencoded content? [duplicate]
I'm getting the following response body and header from https://stackoverflow.com/oauth/access_token when attempting to
exchange an oauth code for a token:
<DEBUG> [00:30:03] my-app - content-...
3
votes
1
answer
104
views
Cannot get redirect_uri to work
This is in regards to my userscript Bulk flag comments. I am sure I have not at all updated the userscript since the first release of June 24, and I am sure I was able to register for an access token ...
10
votes
1
answer
4k
views
What exactly is a valid OAuth domain name for registering your app?
I'm starting to write a native Android client for Stack Overflow, and wondering what exactly is a valid OAuth domain name?
Is it the package name of my app?
Or do I have to point it to a server ...
6
votes
1
answer
87
views
As a user, where in the web UI could I find all the tokens I have granted for Stack Apps?
I want to manage or revoke access tokens I have granted to 3rd party Stack Apps, but I have a hard time to find them in the UI.
4
votes
1
answer
361
views
Getting an API key for an application without a server
When I go to register my application, it asks me my OAUTH application URL. But I don't have an OAuth server and I just want to get the api-key without my server.
How can I fill out the form required ...
2
votes
1
answer
102
views
The new implicit authentication dialog doesn't handle comma-delimited scopes
The authentication docs state that the scopes parameter of the URL to which a user should be directed to, for implicit authentication, should be a list of scopes that are delimited by either commas or ...
4
votes
1
answer
158
views
How to use /me to display my profile data in StackExchange API?
So I'm able to use API calls like:
https://api.stackexchange.com/2.2/questions?pagesize=30&order=desc&sort=activity&site=stackoverflow
to display a list of questions. This is easy as it ...
1
vote
0
answers
84
views
Stack Exchange Javascript SDK implicit OAuth2 bugs in `SE.authenticate`
I've tried to set up an implicit authorization workflow with JavaScript SDK version 2.0:
<script type='text/javascript' src='https://api.stackexchange.com/js/2.0/all.js'></script>
I was ...
4
votes
0
answers
164
views
Can we specify more than one OAuth Domain?
I would like to use the API from a browser extension. With WebExtensions, I should be able to support Firefox and Chrome with the same code.
Chrome provides an identity API for OAuth2, and so does ...
1
vote
1
answer
626
views
oauth 2.0 based on stackexchange api and fetch user details
I am new to oauth 2.0. What i am trying to achieve is following
I have a google api based oauth authentication in place
On top I fetch the gmail email address and verify if this address is present in ...
1
vote
1
answer
316
views
access_token not present in /oauth/access_token response
When using the explicit OAuth authentication for apps, I have problems receiving the access_token. A user goes to /approve and is then forwarded to approve the app. When redirected back to my site I ...
1
vote
1
answer
693
views
No 'Access-Control-Allow-Origin' for oauth/access_token
Following the Stack Apps documentation Authentication (explicit) section I crafted this AJAX call
$.ajax({
url:"https://stackexchange.com/oauth/access_token",
type:"...
0
votes
1
answer
156
views
What token parameters to use for OAuth2 Authorizaton?
I'm trying to connect a piece of desktop software to the Stack Exchange web service through OAuth2. I've read the docs but the problem is that what it talks about is subtly different to what ...
3
votes
1
answer
2k
views
Implicit OAuth flow puts the access token in the hash?
The implicit OAuth flow puts the access token in the hash.
However, I would like to get that in the query (from example.com/hi#access_token=123456 to example.com/hi?access_token=123456) for it to work ...
6
votes
1
answer
195
views
JavaScript SDK-based workflow never pushes message back from OAuth login_success page on Stack Exchange side
I'm using the JavaScript SDK by Stack Exchange provided with the latest API, and despite following the official instructions & examples it doesn't work - it seems there is a bug which breaks the ...
5
votes
1
answer
119
views
Access token keeps being invalidated
For Stack Overflow Extras (SOX), a few users and myself have seen our access tokens being invalidated very often without any apparent reason.
We aren't requesting new tokens (which would invalidate ...