Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with oauth2
Search options not deleted
user 7653
For questions relating to authenticating with the Stack Exchange API using OAuth 2.0, which is an open standard for authorization. General OAuth 2.0 questions are off-topic but might find a home elsewhere in the network.
3
votes
Accepted
Does verifying OAuth2 `access_token` validity count towards API call quota?
Yes, calls to /access-tokens/{accessTokens} use API quota. You can see that by repeatedly running /2.2/access-tokens/XBWL0stf*YIOCl7WpJHqYA)) for example.
With each call, the quota_remaining value w …
- 13k
2
votes
Accepted
`redirect_uri` is not under the registered domain for this application
You need to configure your app for explicit OAuth2, per this other answer, except enter localhost instead of example.com.
(The localhost is based on the original version of the question. …
- 13k
7
votes
Javascript SDK channelUrl for local development
Your value for channelUrl is nominally correct. If I set up my XAMPP server, via httpd.conf to use port 8000, then this HTML page works perfectly fine for me:
<!DOCTYPE html>
<html><head>
<title …
- 13k
3
votes
Accepted
Implicit OAuth flow puts the access token in the hash?
No, you can't get the access_token in the query/search part of the URL. This would be a security leak that would allow 3rd parties to see your access_tokens on the web.
Reference:
OAuth2.0 Implicit …
- 13k
2
votes
Accepted
OAuth redirect_uri to https://stackexchange.com/oauth/login_success?xxx strips part of the q...
I don't think that's a bug, for implicit OAuth. Anyway, if I understand RFC 6749 correctly, that is not how you are supposed to do such extra checks.
Use the state parameter. And this works.
For exa …
- 13k
1
vote
How to get access token from the hash?
Refer to the API Authentication docs; there are a great many things wrong with the URL in the question (at least 5).
For starters, it's to the wrong path. stackoverflow.com/oauth/authorize gives helpf …
- 13k
1
vote
Accepted
How to register a Stack App with explicit OAuth 2.0 flow to a third party site?
Note that a URI is not a domain, but this seems to be a common mistake when setting up OAuth2. …
- 13k
1
vote
Accepted
"client_id rejected" error when retrieving the access_token
That error means that you've used an invalid id or that the settings on your app page are incorrect.
Do the following:
Go to Your Apps page. You should see your app listed. If it is not, then reg …
- 13k
1
vote
Accepted
Is developing, with the Stack Exchange API, possible on my local machine?
Yes, you can use a local environment to develop. For example, this answer contains a complete start to authenticating an HTML+javascript app. All it requires is for you to run XAMPP (or similar serv …
- 13k
4
votes
Accepted
Can not request info after OAuth
Your second call must be https:.
You actually got an error like:
"error_id":406,
"error_message":"Access token sent over non-HTTPS request, it has been invalidated",
"error_name":"access_token_co …
- 13k
2
votes
Accepted
Same access token between different fetch_token requests
Yes, each time you invoke stackexchange.com/oauth/ you will get a fresh access token, even though old ones may still be valid.
For example:
Go to /me/inboxLivedoc and hit Get Token twice, recording …
- 13k
3
votes
Accepted
iOS Client for stackoverflow always throws redirect_uri not a valid uri
That error means either that you've misconfigured the app or that the authentication call is incorrect.
Note that stackexchange.com/oauth/login_success is not a valid redirect_uri irregardless.
You …
- 13k
1
vote
What token parameters to use for OAuth2 Authorizaton?
What software are you using?
Anyway, for a Desktop app, you almost always use the "Implicit" (Client side) procedure.
Configure your Stack app as shown in this answer.
That dialog appears to be set …
- 13k
2
votes
Accepted
No 'Access-Control-Allow-Origin' for oauth/access_token
The question is not clear enough.
You appear to be trying to use jQuery to do explicit OAuth from a web page. If so, this is not allowed.
Explicit OAuth is for servers. You are not running that c …
- 13k
3
votes
Accepted
Cannot get redirect_uri to work
There have been no reported changes to the API, officially for many years, (unofficially since January).
But, frankly that script's approach should have never worked. OAuth credentials are sent to:
…
- 13k