How to access Wordpress authentication token

Question

We are trying to link our website to Wordpresses API using OAuth 2.0. Hoping that a client can authenticate and post to WordPress from our site. We need to receive an access token to do this.

We have successfully connected with Wordpress to receive our access code. We've followed the Wordpress api, and have it working for a single user (with secret key not with OAuth). Things we have tried are adding a headers, changing data to different names examples: params, body

This is a simplified version of the code we have been using

const axios = require('axios');
axios({
   method: "POST",
   data: {
       grant_type: 'authorization_code',
       client_id: '12345',
       client_secret: 'ABCABC1235412345',
       code: 'Abc123',
       redirect_uri: 'https://localhost:5000/wordpress/callback_wordpress'
   },
   url: 'https://public-api.wordpress.com/oauth2/token'
}).then( (response) => {
   console.log(response);
}).catch( (error) => {
   console.log(error);
});

We expect to receive a jwt access token, but instead are getting this 400 error:

data:
    { error: ‘invalid_client’,
      error_description: ‘The required “client_id” parameter is missing.’ } } }

It seems clear that we are missing the client_id, however we have it included in our request. Is there somewhere else we need to include it?

If anyone in the future faces the same issue, just set "Content-Type": "application/x-www-form-urlencoded" header in your post request. — Rakesh
– Rakesh, Commented Jan 1, 2024 at 10:53

Joe Benebenek · Accepted Answer · 2019-04-23 18:05:45Z

1

 var authOptions = {
        url: 'https://public-api.wordpress.com/oauth2/token',

        form: 
        {
          grant_type: 'authorization_code',
          code: code,
          client_id: client_id,
          client_secret: client_secret,
          redirect_uri: redirect_uri,
        },
        headers: {
          'Authorization': 'Basic ' + (Buffer.from(client_id + ':' + client_secret).toString('base64'))
      },

        json: true
      };

We needed to include a header with that information, and we needed to use the variable 'form' instead of 'data'.

answered Apr 23, 2019 at 18:05

Joe Benebenek

413 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to access Wordpress authentication token

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related