Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 7653

For questions relating to authenticating with the Stack Exchange API using OAuth 2.0, which is an open standard for authorization. General OAuth 2.0 questions are off-topic but might find a home elsewhere in the network.

1 vote
Accepted

How to register a Stack App with explicit OAuth 2.0 flow to a third party site?

Note that a URI is not a domain, but this seems to be a common mistake when setting up OAuth2. …
Brock Adams's user avatar
1 vote

How to get access token from the hash?

Refer to the API Authentication docs; there are a great many things wrong with the URL in the question (at least 5). For starters, it's to the wrong path. stackoverflow.com/oauth/authorize gives helpf …
Brock Adams's user avatar
2 votes
Accepted

`redirect_uri` is not under the registered domain for this application

You need to configure your app for explicit OAuth2, per this other answer, except enter localhost instead of example.com. (The localhost is based on the original version of the question. …
Brock Adams's user avatar
2 votes
Accepted

OAuth redirect_uri to https://stackexchange.com/oauth/login_success?xxx strips part of the q...

I don't think that's a bug, for implicit OAuth. Anyway, if I understand RFC 6749 correctly, that is not how you are supposed to do such extra checks. Use the state parameter. And this works. For exa …
Brock Adams's user avatar
1 vote
Accepted

The new implicit authentication dialog doesn't handle comma-delimited scopes

This appears to have been silently fixed, sometime in the last year. Now, both: https://stackexchange.com/oauth/dialog?client_id=1515&scope=read_inbox,write_access,private_info&redirect_uri=https:/ …
Brock Adams's user avatar
3 votes

Find out whether a user has association bonus

Yes, you can find out if the user has received the association bonus using the API. It's a bit clunky though. However, as we discovered, "association bonus rights" are rather meaningless at the mome …
Brock Adams's user avatar
2 votes
Accepted

I have created a lot of access_token with no_expiry scope while experimenting. How do I dele...

This is what the /apps/{accessTokens}/de-authenticate route does. Passing valid access_tokens to this method causes the application that created them to be de-authorized by the user associated wit …
Brock Adams's user avatar
0 votes

"text/plain" content type header for x-www-form-urlencoded content?

See Stack Exchange OAuth2, explicit access-token response format does not adhere to RFC6749 standard and see RFC 6750. …
Brock Adams's user avatar
3 votes
Accepted

Cannot get redirect_uri to work

There have been no reported changes to the API, officially for many years, (unofficially since January). But, frankly that script's approach should have never worked. OAuth credentials are sent to: …
Brock Adams's user avatar
11 votes

What exactly is a valid OAuth domain name for registering your app?

The OAuth Domain is either: A valid domain that you own and control, and that is hosted somewhere the client can reach. Say, for example that you owned unicorns.mil. See this answer and this answer …
Brock Adams's user avatar
9 votes
Accepted

Can the redirect_uri contain port number?

You got that error because you set the OAuth Domain like example.com:8080, not the redirect_uri. That's not how you configure non-standard ports; see below. The redirect uri, with port, feature now …
Brock Adams's user avatar
1 vote
Accepted

Getting an API key for an application without a server

You don't need a server to get an API key, or even to use OAuth2. Set OAuth Domain to: stackexchange.com, and Application Website to: https://stackapps.com/. …
Brock Adams's user avatar
2 votes
Accepted

How to use /me to display my profile data in StackExchange API?

For read requests, you must send the token (and key) in the URL. For example: https://api.stackexchange.com/2.2/me?site=stackoverflow&key=dp55hR5Wr9UhOJReA6F2gg((&access_token=26nor26ZCVN4y5vn94Zg(w) …
Brock Adams's user avatar
2 votes
Accepted

No 'Access-Control-Allow-Origin' for oauth/access_token

The question is not clear enough. You appear to be trying to use jQuery to do explicit OAuth from a web page. If so, this is not allowed. Explicit OAuth is for servers. You are not running that c …
Brock Adams's user avatar
1 vote

What token parameters to use for OAuth2 Authorizaton?

What software are you using? Anyway, for a Desktop app, you almost always use the "Implicit" (Client side) procedure. Configure your Stack app as shown in this answer. That dialog appears to be set …
Brock Adams's user avatar

15 30 50 per page