access-token

Problem with access token while creating Facebook Test Users

℡╲_俬逩灬. 提交于 2019-12-06 09:58:11
问题 I'm trying to create test users for my Facebook application. They announced this functionality in this blog post in November (http://developers.facebook.com/blog/post/429) and it is documented here (http://developers.facebook.com/docs/test_users/). I could not find the answer to this elsewhere... According to the documentation, "You can create a test user associated with a particular application using the Graph API with the application access token." This links to the section "Autenticating

IdentityServer4 Access Token Lifetime

末鹿安然 提交于 2019-12-06 08:20:38
问题 I am using IdentityServer4, and its configuration is in the database. There is a silent renewal on the client (oidc). I have set the following lifetime settings for the client: AbsoluteRefreshTokenLifetime = 60 * 30,//30 mins AccessTokenLifetime = 60 * 5,//5 mins SlidingRefreshTokenLifetime = 60 * 15 // 15 mins What should happen? How long should be the lifetime of the token? When should the user be asked to login again? There is no clear documentation about the token lifetime when its

Obtaining a valid access token for Microsoft Graph API

六眼飞鱼酱① 提交于 2019-12-06 07:43:27
I am working on an ASP.NET MVC5 Web App that uses Azure ADAL libraries to authenticate users, it works fine, however, when I manually send requests to graph, ex: GET https://graph.microsoft.com/v1.0/me or GET https://graph.microsoft.com/v1.0/groups ?$filter=from/displayName eq 'whatever'. I have tried updating the App Registration in Azure as to add the required Graph permissions, and I have also tried creating new app registrations, no matter what I do my requests will always respond 401 Unauthorized, is there anything I am missing? EDIT: Example response from Postman { "error": { "code":

cant get access token from google using angularjs

不打扰是莪最后的温柔 提交于 2019-12-06 07:32:52
i am folowing this guide and trying to get a accses token from google api. i alredy got an auth code. so i'm using angularjs to send httprequest to google server. the problem is that i always get bad request answer. this is my code: $http({ method: 'POST', url: 'https://accounts.google.com/o/oauth2/token', headers: {'Content-Type': 'application/x-www-form-urlencoded'}, params : { code : '4/heMv6ozWwCxS5RyTzCgThAgxvRyk.oske-bNEGOUTOl05ti8ZT3YnwwH8iQI', client_id : GoogleAppInfo.clientId, redirect_uri : GoogleAppInfo.redirect_uri, client_secret : GoogleAppInfo.client_secret, grant_type :

PHP OAuth 1.0 Library that handles an api key/secret pair and endpoints (request,authorization,and access)

試著忘記壹切 提交于 2019-12-06 06:17:36
I'm working with an OAuth 1.0 API that requires we use an API KEY/PAIR. Also, it gives me 3 urls: Request token endpoint: /oauth/request_token Authorization endpoint: /oauth/authorize Access token endpoint: /oauth/access_token Here is what the documentation states: We use the most current specification of OAuth 1.0 protocol (RFC 5849) to authenticate our API requests. We use OAuth 1.0 because it is an open standard, and we adapt the "three-legged" client/user/server protocol flow of OAuth 1.0 to a "two-legged" client/server model . In our adaptation of OAuth for authenticated client/server

Allow loopback application to use previous access token

 ̄綄美尐妖づ 提交于 2019-12-06 05:57:55
In my loopback application, once i create the access token (after login), it remains valid in my application unless application stops. when application restarted it is not allowing previous access token. How can i make previous access token validate even after restarting the application? Your access token is getting stored by default in loopback memory . Therefore, it persists only until the application is restarted. open server/model-config.json "AccessToken": { "dataSource": "db", "public": false } This is the initial configuration of the Access Tokens . See here the storage datasource is db

Using Refesh Token in Token-based Authentication is secured?

|▌冷眼眸甩不掉的悲伤 提交于 2019-12-06 05:54:08
问题 I am building a token based authentication (Node.js using passport/JWT with an angular client). After the user enter his credentials he gets an access token, which he sends in every request inside the header (header: bearer TOKEN). I don't want to prompt a login request everytime his access token expires (about everyday I guess), I've heard about the Refresh Tokens. The refresh token never expires (or rarely expires) and able to renew tokens indefinitely.When the access token is about to

Azure AD Configurable Token Lifetimes not being Applied

为君一笑 提交于 2019-12-06 05:32:04
I want to change the default token lifetimes in Azure AD as shown here , but it looks like the changes are not being applied. I am running the following commands using the PowerShell cmdlets in the AzureAdPreview module from the PowerShell Gallery : New-AzureADPolicy -Definition @("{`"TokenLifetimePolicy`":{`"Version`":1, `"AccessTokenLifetime`":`"10:00`",`"MaxInactiveTime`":`"10:00`",`"MaxAgeSingleFactor`":`"10:00`",`"MaxAgeMultiFactor`":`"10:00`",`"MaxAgeSessionSingleFactor`":`"10:00`",`"MaxAgeSessionMultiFactor`":`"10:00`"}}") -DisplayName AbsoluteMinimumPolicyScenario

Cannot get oAuth2 Access Token for Google Analytics API

微笑、不失礼 提交于 2019-12-06 04:18:36
问题 I am using Rails + Garb Gem (Sija Branch) + omniauth-google-oauth2 Gem and I can successfully authenticate with the Google Analytics API and extract data that our app is generating when using a user login, e.g.: Garb::Session.login('USERNAME', '<PASSWORD>') I can then use Garb to connect to the Analytics Profile I want and pull the data from it and display some charts on a webpage. This all works fine. However, I want to use oAuth2 to authenticate with Analytics which is why I had to install

Send GET request with token using Java HttpUrlConnection

隐身守侯 提交于 2019-12-06 00:43:50
I have to work with RESTful web service which uses token-based authentication from Java application. I can successfully get token by this way: import java.io.BufferedReader; import java.io.InputStreamReader; import java.io.OutputStream; import java.net.HttpURLConnection; import java.net.URL; public void getHttpCon() throws Exception{ String POST_PARAMS = "grant_type=password&username=someusrname&password=somepswd&scope=profile"; URL obj = new URL("http://someIP/oauth/token"); HttpURLConnection con = (HttpURLConnection) obj.openConnection(); con.setRequestMethod("POST"); con.setRequestProperty(