Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 7653

A question about the Stack Exchange authentication process and related API methods.

1 vote
0 answers
70 views

The authentication doc gives a wrong domain for authentication

The authentication doc page now lists URL's like: https://stackoverflow.com/oauth https://stackoverflow.com/oauth/access_token etc. …
Brock Adams's user avatar
1 vote
Accepted

The new implicit authentication dialog doesn't handle comma-delimited scopes

This appears to have been silently fixed, sometime in the last year. Now, both: https://stackexchange.com/oauth/dialog?client_id=1515&scope=read_inbox,write_access,private_info&redirect_uri=https:/ …
Brock Adams's user avatar
2 votes
Accepted

I have created a lot of access_token with no_expiry scope while experimenting. How do I dele...

This is what the /apps/{accessTokens}/de-authenticate route does. Passing valid access_tokens to this method causes the application that created them to be de-authorized by the user associated wit …
Brock Adams's user avatar
0 votes

"text/plain" content type header for x-www-form-urlencoded content?

The question is either not completely clear or a duplicate. You may need to post an MCVE. According to the OAuth 2.0 Authorization spec (RFC 6749), section 5.1: The parameters are included in the ent …
Brock Adams's user avatar
3 votes
Accepted

Cannot get redirect_uri to work

See this answer on Meta Stack Exchange for framework code and an example of using authentication with a userscript. …
Brock Adams's user avatar
2 votes
Accepted

How to use /me to display my profile data in StackExchange API?

For read requests, you must send the token (and key) in the URL. For example: https://api.stackexchange.com/2.2/me?site=stackoverflow&key=dp55hR5Wr9UhOJReA6F2gg((&access_token=26nor26ZCVN4y5vn94Zg(w) …
Brock Adams's user avatar
3 votes
Accepted

Accessing the Stack Exchange API not on behalf of an user?

You only need to use OAuth if you are trying to add or modify data (including votes). If you want to do that, your app must log in as a user, no exceptions. If you just want to read or search data, …
Brock Adams's user avatar
2 votes
Accepted

No 'Access-Control-Allow-Origin' for oauth/access_token

The question is not clear enough. You appear to be trying to use jQuery to do explicit OAuth from a web page. If so, this is not allowed. Explicit OAuth is for servers. You are not running that c …
Brock Adams's user avatar
1 vote

What token parameters to use for OAuth2 Authorizaton?

What software are you using? Anyway, for a Desktop app, you almost always use the "Implicit" (Client side) procedure. Configure your Stack app as shown in this answer. That dialog appears to be set …
Brock Adams's user avatar
1 vote
Accepted

Is it okay to just send the API key (without implementing oauth-2 login)?

See the Authentication docs for more info. The issue you are having with has_more is unrelated and is a known, current, bug. …
Brock Adams's user avatar
4 votes
Accepted

Refresh expired acess token basics

Dealing with token expiration is pretty simple. When a token is/goes bad then, when you make an API call that uses the token, you will get a JSON response like this: { "error_id": 403, "error …
Brock Adams's user avatar
3 votes
Accepted

iOS Client for stackoverflow always throws redirect_uri not a valid uri

That error means either that you've misconfigured the app or that the authentication call is incorrect. Note that stackexchange.com/oauth/login_success is not a valid redirect_uri irregardless. … You probably want/need to use Client side (Implicit) authentication, in which case the redirect_uri would be:           https://stackexchange.com/oauth/login_success Note the mandatory https://. …
Brock Adams's user avatar
2 votes
Accepted

Same access token between different fetch_token requests

Yes, each time you invoke stackexchange.com/oauth/ you will get a fresh access token, even though old ones may still be valid. For example: Go to /me/inboxLivedoc and hit Get Token twice, recording …
Brock Adams's user avatar
1 vote
Accepted

Authentication uses # instead of `?`?

Refer to the generic URI syntax, it is perfectly valid to have a fragment (The optional part of a URL that starts with an octothorpe #) without a preceding query (The optional part of a URL that start …
Brock Adams's user avatar
3 votes
Accepted

Is there a way to specify how long I want an access token to be valid for?

Yes, I always get 86399 too. And, no, you can't specify an interval other than no_expiry. But you can call /access-tokens/{accessTokens}/invalidateDoc at whatever interval you wish. So, for less use …
Brock Adams's user avatar

15 30 50 per page