Stack Overflow
Stack Overflow

Questions tagged [access-token]

Access Token is the last token acquired during the OAuth authentication process.

4002 questions
823
votes
21 answers

Why Does OAuth v2 Have Both Access and Refresh Tokens?

Section 4.2 of the draft OAuth 2.0 protocol indicates that an authorization server can return both an access_token (which is used to authenticate oneself with a resource) as well as a refresh_token, which is used purely to create a new…
dave mankoff
  • 17,379
  • 7
  • 50
  • 64
378
votes
20 answers

Not receiving Google OAuth refresh token

I want to get the access token from Google. The Google API says that to get the access token, send the code and other parameters to token generating page, and the response will be a JSON Object like : { "access_token" :…
Muhammad Usman
  • 10,426
  • 22
  • 72
  • 107
352
votes
16 answers

Where to store my Git personal access token?

Is it necessary to store the personal access token somewhere locally on the machine after generating it in GitHub? If yes, is there any preferred way where it could be stored?
Krzysztof Słowiński
  • 6,239
  • 8
  • 44
  • 62
309
votes
18 answers

Sending the bearer token with axios

In my react app i am using axios to perform the REST api requests. But it's unable to send the Authorization header with the request. Here is my code: tokenPayload() { let config = { headers: { 'Authorization': 'Bearer ' + validToken() …
rakibtg
  • 5,521
  • 11
  • 50
  • 73
290
votes
7 answers

What if JWT is stolen?

I am trying to implement stateless authentication with JWT for my RESTful APIs. AFAIK, JWT is basically an encrypted string passed as HTTP headers during a REST call. But what if there's an eavesdropper who see the request and steals the token? …
smwikipedia
  • 61,609
  • 92
  • 309
  • 482
264
votes
11 answers

What is the purpose of a "Refresh Token"?

I have a program that integrates with the YouTube Live Streaming API. It runs on timers, so its been relatively easy for me to program in to fetch a new Access Token every 50 minutes with a Refresh Token. My question is, why? When I authenticated…
Jason Axelrod
  • 7,155
  • 10
  • 50
  • 78
173
votes
8 answers

Basic HTTP and Bearer Token Authentication

I am currently developing a REST-API which is HTTP-Basic protected for the development environment. As the real authentication is done via a token, I'm still trying to figure out, how to send two authorization headers. I have tried this one: curl -i…
Azngeek
  • 2,183
  • 2
  • 16
  • 21
172
votes
4 answers

Token Based Authentication in ASP.NET Core

I'm working with ASP.NET Core application. I'm trying to implement Token Based Authentication but can not figure out how to use new Security System for my case. I went through examples but they didn't help me much, they are using either cookie…
Grant
  • 2,295
  • 3
  • 14
  • 13
163
votes
11 answers

Do Google refresh tokens expire?

I have used the refresh token several times in just a short period for testing purposes, but I wonder whether Google refresh tokens ever expire? Can I use the same refresh token to get another access token again and again for a long period (a week…
Robin Carlo Catacutan
  • 13,249
  • 11
  • 52
  • 85
124
votes
4 answers

Facebook Access Token for Pages

I have a Facebook Page that I want to get some things from it. First thing are feeds and from what I read they are public (no need for access_token). But I want to also get the events... and they aren't public and need the access_token. I don't want…
Rafael 'BSIDES' Pereira
  • 2,951
  • 5
  • 22
  • 24
120
votes
8 answers

Python request with authentication (access_token)

I am trying to use an API query in Python. From the command line I can use curl like so: curl --header "Authorization:access_token myToken" https://website.example/id This gives some JSON output. myToken is a hexadecimal variable that remains…
user1895406
  • 1,383
  • 2
  • 9
  • 10
102
votes
6 answers

How to decode the JWT encoded token payload on client-side in angular?

I am getting one JWT encoded access token from my API in response. But I am not able to decode it and get it in JSON format. I tried using the angular2-jwt library for it, but it did not worked. I am writing my code below: …
Sunny Parekh
  • 1,049
  • 2
  • 7
  • 8
99
votes
18 answers

How to refresh token with Google API client?

I've been playing around with the Google Analytics API (V3) and have run into som errors. Firstly, everything is set up correct and worked with my testing account. But when I want to grab data from another profile ID (Same Google Accont/GA Account)…
seorch.me
  • 1,001
  • 1
  • 8
  • 4
98
votes
3 answers

Is a Refresh Token really necessary when using JWT token authentication?

I'm referencing another SO post that discusses using refresh tokens with JWT. JWT (JSON Web Token) automatic prolongation of expiration I have an application with a very common architecture where my clients (web and mobile) talk to a REST API which…
TheJediCowboy
  • 8,924
  • 28
  • 136
  • 208
97
votes
9 answers

Get refresh token google api

I can't get my refresh token with my code. I can only get my access token, token type etc., I have followed some tutorials like putting access_type=offline on my login URL: echo "
Robin Carlo Catacutan
  • 13,249
  • 11
  • 52
  • 85
1
2 3
…
99 100