Questions tagged [access-token]

Access Token is the last token acquired during the OAuth authentication process.

4002 questions
1
vote
0 answers

Filter Azure Access Token based on Azure AD User Role

I have a Spring Boot application where I'm trying to filter the incoming Access Token based on the roles defined in our Azure Active Directory. The Access Token validates correctly, but I seem unable to filter on the roles. What am I missing? Do I…
1
vote
0 answers

Exclude client roles from access_token in keycloak

I've a keycloak with multiple clients and roles. so all the clients and roles would come in keycloak access_token when client is asssigned to user/group. Now i have scenario where I want to remove one client and their roles from keycloak…
Nikhil Lingam
  • 121
  • 2
  • 12
1
vote
0 answers

how get user_id from given acces_token to rails API ( I use google omniAuth)

I hope you are all well. I'm creating rails API and I include Google OmniAuth (it's only way to log in to my app). I successfully generate access_token, user can log in with google but.. after that how should I define user_id in my BE ? I know it…
1
vote
1 answer

to refresh access token once it expires

I am new to Spring security using OAuth2 - I am working on publishing the JSON message to an endpoint in a non-servlet environment (which doesn't involve any UI). To publish this we would need accessToken(using OIDC) which we get it from another…
Ram
  • 11
  • 1
  • 3
1
vote
1 answer

How to create an access token?

I am a bit confused about the facebook graph api and access tokens. I have created a facebook user and a facebook page. Now I want to write an application that lets the user post a message on the pages wall/feed. As far as I understand it right now…
stofl
  • 2,950
  • 6
  • 35
  • 48
1
vote
0 answers

Meaning of refresh token using Bearer with TLS 1.2

I understand that when using Bearer you should be using two tokens access which has a short life time and refresh token which has a long life time. The reasoning behind that is that with every request you have to use the token and "more secure" is…
Teamol
  • 733
  • 1
  • 14
  • 42
1
vote
1 answer

Udemy-dl access token is not recognised

I have been recently trying to download my own Udemy courses, as I always did, with Udemy-dl software but I am having the following error: For about a week, when I do not use token I get this: [i] : Trying to login using session cookie [-] : Udemy…
Sam Sung
  • 11
  • 1
  • 6
1
vote
2 answers

generate an access token for a external API to use firebase functions

I am having trouble understanding how to accomplish this. I have Firebase functions running on my application. I am using an external API in which I can configure Webhooks to hit an endpoint on my Firebase functions to perform an action. To make…
1
vote
0 answers

what is a secure way to create a refresh token used on refresh token rotation

On my token authentication, I have two tokens, one is a short term access token and another is a long time refresh token. I want to implement a refresh token rotation. So I'm going to hash the refresh token and then save to the database. When the…
Moon
  • 790
  • 1
  • 8
  • 19
1
vote
0 answers

Microsoft.Identity.Web inside an Azure function

I need to call a downstream API, i.e., PowerBI Service, from inside my Azure Function. I have a working example inside a web app but I am not able to make it happen inside my Azure Function. In the web app sample, the configuration happens via…
1
vote
0 answers

Generating Agora Token for my Flutter Live Stream App

So, am trying to generate a token for my audio live stream flutter app, following this tutorial article here. Go to this point to request endpoint to get Rtc token: Then I got stuck here with this error I want to add a POST handler to generate…
1
vote
1 answer

Getting a page token from an app token in Facebook is not working

I'm trying to use a Facebook app token instead of a user token to get a page token. But I can only get a page token with user token and not with app token. Here's what I'm doing. First I get the app token in that…
1
vote
2 answers

How do we access a file in github repo inside our azure databricks notebook

We have a requirement where we need to access a file hosted on our github private repo in our Azure Databricks notebook. Currently we are doing it using curl command using the Personal Access Token of a user. curl -H 'Authorization: token…
1
vote
2 answers

Laravel Passport createToken method not giving me access_token. How can I solve this problem?

All of configuration is right, but does not work. My controller code is: $appUser = User::create([ 'name' => $user->name, 'email' => $user->email, 'password' => Hash::make(Str::random(8)), …
Eahiya
  • 931
  • 1
  • 6
  • 12
1
vote
1 answer

Graph API "get groups" on behalf of signed user results into 403 error with message":"Insufficient privileges to complete the operation

use case: calling https://graph.microsoft.com/v1.0/groups by using Authorization_code flow on behalf of the logged in user: with OAuth2Session scope: https://graph.microsoft.com/.default oauth_session = OAuth2Session(clientid=clientid,…
guffi
  • 83
  • 4