Incorrect follow/user in docs?

erwin1234777 · August 3, 2020, 7:09am

is listed as no Authorization needed for that endpoint

curl -H 'Client-ID: uo6dggojyb8d6soh92zknwmi5ej1q2' \
-X GET 'https://api.twitch.tv/helix/users/follows?to_id=23161357'

is the shown snippet with only Client-ID in the header

Even adding my token gets me an error with Authorization: Bearer

The client ID is there, i just swapped it for <client_id>/ to not leak info about it, but they were there on request

BarryCarlyon · August 3, 2020, 11:18am

As per the helix change, all helix endpoints require an oAuth token.

You need to add a header of

Authorization: Bearer TOKNEHERE

There is a ticket in for the Documentation being fixed (it was fixed then it was broken)

ClientID’s are public no need to hide that.

My implict auth example here

github.com

BarryCarlyon/twitch_misc/blob/main/authentication/implicit_auth/index.html#L33


      
          // Substitute as needed
          var client_id = 'hozgh446gdilj5knsrsxxz8tahr3koz';
          var redirect = 'https://barrycarlyon.github.io/twitch_misc/authentication/implicit_auth/';
          
          document.getElementById('authorize_public').setAttribute('href', `https://id.twitch.tv/oauth2/authorize?client_id=${client_id}&redirect_uri=${encodeURIComponent(redirect)}&response_type=token`);
          document.getElementById('authorize_email').setAttribute('href', `https://id.twitch.tv/oauth2/authorize?client_id=${client_id}&redirect_uri=${encodeURIComponent(redirect)}&response_type=token&scope=user:read:email`);
          document.getElementById('access_token').textContent = '';
          
          if (document.location.hash && document.location.hash != '') {
              var parsedHash = new URLSearchParams(window.location.hash.slice(1));
              if (parsedHash.get('access_token')) {
                  var access_token = parsedHash.get('access_token');
                  document.getElementById('access_token').textContent = `Your Access Token extracted from the #url is ${access_token}`;
          
                  document.getElementById('user_data').textContent = 'Loading';
          
                  // call API
                  fetch(
                      'https://api.twitch.tv/helix/users',
                      {
                          "headers": {

Provides an example of specifying the header.

erwin1234777 · August 3, 2020, 4:27pm

I’ve got a feeling that i’m still doing something wrong>

Also, wouldn’t the snippets shown in the documentation need to be updated to include the Auth Header?

Thank you.

BarryCarlyon · August 3, 2020, 4:29pm

You seem to sending the clientID and authorization as query string arguments, not a header.

Yup, we have a uservoice open for fixing the docs

erwin1234777 · August 3, 2020, 4:34pm

Aaah good catch, didnt notice i was using param over header. Ty Barry!

system · September 2, 2020, 4:34pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.