Hi guys. I’m making authentication system for a site for the first time. I had no problems with getting user’s auth token. But now I need to get user’s name on Twitch to be able to register him on my site. For now I’m testing this just by opening a link in a browser, later it will be pulled via php_…

Firstly, you don’t need to include the client_id or the scope if you are already sending the oauth :slight_smile: (the request will still work, its just extra stuff that doesn’t do anything in the URL. In your example, your link only needs to be https://api.twitch.tv/kraken?oauth_token=f5bncg7gbrhy…

You need to specify client_id from your app too or result will look like this: {"error":"Bad Request","status":400,"message":"No client id specified"} I still can’t figure out why it says that token isn’t valid. I just tried to do everything from scratch, I removed access for my app from my Twitch…

[image] MaestroMagnifico: You need to specify client_id from your app too or result will look like this: {“error”:“Bad Request”,“status”:400,“message”:“No client id specified”} This is only the case if the OAUTH is invalid. Twitch will automatically determine the proper client_id to use when…

@Larklen About client id: [image] Client-ID Requirement FAQs API In case you missed it, the Kraken API will require a Client-ID as of August 8th, 2016. Read the blog for more details. Here are a few FAQs that I thought I’d address in one place: Is the Client-ID required f…

In that very blog you linked, if you look at the second bolded question (Q&A style format), you will see what I am referring to :slight_smile: If I’m including an OAuth token, do I need to include a Client-ID? If you are passing in an OAuth token, we will figure out the Client-ID for you. There i…

Just to make sure: you’re not using the username for a key or login on your site, right? We’re switching over to IDs only for API calls , so I just want to make sure you’re storing the ID from the API as well so that it doesn’t break in the future. :slight_smile: Have you tried doing a single scope …

I was going to. I guess I’ll also have to figure out how to get user id now. Can you take a look what’s going on with my token? Why it’s not valid? I uploaded live example: http://phantomik.ru/catalog/ - press “Войти” in the top right corner. What will happen step by step: This link will open in …

You’re using the authorization code flow and getting a code instead of a token, which is why it is coming back invalid. In the authorization code flow, you have to exchange the code to get a token. Currently, you’re trying to pass in an auth code as a token. If you want to continue using that flow, …

I rly need to learn how to read lol. I totally missed step 3. Now I got it working, thanks. One more question - what’s this? &state=[your provided unique token] Do I need to pass this argument? It seems like it works fine even without it. It would be better for me to not generate unique id every …

It’s optional but highly recommended to prevent CSRF.

Authentication: token valid = false

API

MaestroMagnifico December 6, 2016, 4:33pm 5

@Larklen About client id:

Topic		Replies	Views
Unable to get clientId info from a valid twitch token API	2	1978	February 22, 2016
Some API endpoints do not recognize the Client-ID from an oauth token API	3	1483	September 23, 2016
Error 401: "Unauthorized" "invalid oauth token" when requesting user information API	12	20041	December 17, 2018
Getting user's ID after authing API	5	1842	September 2, 2017
User Authorization to validate/confirm twitch username API	9	3751	February 28, 2019

Authentication: token valid = false

Related topics