Skip to main content

Questions tagged [oauth]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
10 votes
1 answer
131 views

What scope to supply to get a refresh token from Stack Exchange?

In the process of implementing a OAuth app for Stack Exchange, I noticed that none of the approaches that conventionally work - supplying a offline_access scope, for example - result in the OAuth ...
Benn's user avatar
  • 103
9 votes
3 answers
1k views

Chrome warns me my connection is not secure when authenticating in SEDE with a Google account

When I go to the login page of the Stack Exchange Data Explorer here and click the Log in using Google button, I'm not getting logged in but instead greeted with a Chrome message protecting my privacy:...
rene's user avatar
  • 90.2k
18 votes
1 answer
243 views

StackExchange's OAuth login broken - identifying an HTTPS request as non-HTTPS

Recently (as in, the last few hours - however, it may have been broken for a few days), I've been unable to login via Stack Exchange for a third party application with Stack Exchange's OAuth support. ...
ert's user avatar
  • 1,312
4 votes
0 answers
45 views

Port not included in client-side OAuth flow

I was recently making an app using the SE API's client-side auth flow. What I noticed is that there was this Unable to post message to http://localhost. Recipient has origin http://localhost:5000. ...
Downgoat's user avatar
  • 846
2 votes
0 answers
86 views

Redirect parameter `state` is missing in case of error

Testing OAuth authorization in my app I noticed a case when state parameter is not passed to redirect uri. I use state to track auth process at server side. If user doesn't authorize application, he ...
dmig's user avatar
  • 21
6 votes
1 answer
2k views

Authentication API - port number in redirect_uri is ignored

We're using the API explicit flow for identity brokering in our Keycloak SSO server to provide users with the option for logging in using their Stack Overflow account. Recently, we've noticed that ...
vasam's user avatar
  • 63
5 votes
1 answer
160 views

Using oAuth in API throwing internal server error

My application has 26 users, but yesterday several (prospective) users started receiving an error page (/error?aspxerror=/oauth) saying that it is all [stack exchange's] fault and that the data is ...
Watchtower's user avatar
4 votes
1 answer
555 views

API authentication channelUrl from a userscript?

The Stack Exchange API has this Javascript library for authentication. What do I pass as channelUrl for a user script running on SE sites? The docs said it needed to be "a blank page on the same ...
Jason C's user avatar
  • 26k
1 vote
0 answers
23 views

redirect_uri not honored in stackexchange oauth [duplicate]

In StackExchange OAuth flow the redirect_uri is not honoring it seems. When logging in (say login with google) once the authentication is successful we are not being redirected to redirect_uri even ...
sri's user avatar
  • 119
5 votes
1 answer
224 views

OAuth redirect URL is not honored

Repro: Logout from all Stack Exchange accounts, open: https://stackexchange.com/oauth?client_id=375&redirect_uri=http%3a%2f%2fcareers.stackoverflow.com%2fgateway%2fstack After login, I got ...
Tony's user avatar
  • 287
2 votes
0 answers
81 views

StackExchange oauth login redirection duplicates state and return 404

We are integrating StackExchange with OAuth. And authenticating user by redirecting to URL like: https://stackexchange.com/oauth?client_id=542&redirect_uri=https%3A%2F%2Flocalhost%3A44301%...
Tony's user avatar
  • 287
2 votes
0 answers
55 views

Trying to authenticate via the API results in "Oops! something bad happened"

Since 10/16/2015, Stack Exchange OAuth has been failing for us with an unexpected error from Stack Exchange in Authorize flow. - User gets navigated to Stack Exchange login page. - User chooses to ...
atul.goyal's user avatar
2 votes
0 answers
51 views

Should no_expiry be used for OAuth to only identify accounts?

I'm about to integrate StackExchange as an OAuth provider into my web application. The documentation states: expires will only be set if scope does not include no_expiry, the use of which is ...
kelunik's user avatar
  • 261
2 votes
0 answers
82 views

Is StackExchange OAuth broken?

Logging in to stackexchange.com via oauth (Google) was temporarily not working, but it's solved now. While logged in my gmail account ( and also happily logged in to StackOverflow: I can see my ...
Marco Massenzio's user avatar
1 vote
1 answer
125 views

does stackoverflow support indieauth OpenID delegation

I've been following this post on replacing-myopenid and have setup a github page as per the instructions from indieauth.com. I want to add 'http://emeraldjava.github.io' as an alternative open id url ...
emeraldjava's user avatar
3 votes
0 answers
137 views

OAuth login weirdness

I just noticed this in my app: I'm all for making the most popular choices easiest to hit, but I'm not sure this is the solution. Note that I'm the author of the app, and I'm not doing anything ...
Undo's user avatar
  • 50.7k
9 votes
2 answers
292 views

How do you see what applications you've authorized on Stack Exchange with OAuth access?

I'm working on an app that integrates with Stack Exchange's OAuth interface, as defined here. I can approve the application, but can't figure out how to find the apps that I've approved. How do I ...
Paul Fryer's user avatar