1,115 questions
0
votes
0
answers
30
views
Blazor WASM MSAL: Redirect to admin page after token expiration with localStorage credentials
I'm using Blazor WebAssembly with MSAL for authentication and storing Azure AD B2C credentials in localStorage. My setup is roughly like this:
builder.Services.AddMsalAuthentication(options =&...
- 35
0
votes
1
answer
84
views
How can I send my refresh tokens via httponly cookie to standalone blazor WebAssembly?
I've been trying for a couple days to implement refresh tokens into my ASP.NET Core Web API, but to no avail.
I've currently got an ASP.NET Core Web API that allows someone to log in with a username ...
0
votes
1
answer
112
views
Viewer SDK - Access Token Management with Automatic Routing
I am looking for guidance on how to configure authorization token management with automatic routing enabled in the Viewer SDK.
Our application sets up token refreshing using the getAccessToken ...
- 1
0
votes
0
answers
40
views
Why does my OAuth2 access token refresh on every API call after Docker deployment (works fine locally)?
I’m facing an OAuth2 token persistence issue in a Node.js backend.
Scenario
I have a Node.js backend that integrates with APIs using OAuth2.
I wrote a token manager that:
Stores the access token + ...
- 1
0
votes
0
answers
57
views
Social Login from AWS Cognito is not returning the refresh token
I created an user pool, I can login with Gmail through HostedUI successfully, but when checking the session, returned by Cognito, no refresh token is given back, only Access Token and Id Token. I ...
- 757
1
vote
0
answers
71
views
Not able to refresh JWT API key using refresh token
I am trying to access Deltek's ComputerEase API, I have the API key ID, API key & Refresh Token. Using the following code I was able to get authorization:
import requests
url = "https://api....
- 107
0
votes
1
answer
212
views
Can we use refresh token grant type with PKCE?
Is there any way to create public client that supports refresh token grant type? If not, how can I refresh tokens in my single page application?
I created spring boot authentication server
spring ...
0
votes
2
answers
77
views
OAuth 2 Token management service?
I am building an application that needs to interact with to multiple external services such as Google, Facebook, or other third party applications. To connect to all those services, I will be using ...
- 406
0
votes
1
answer
74
views
Refresh Token Rotation lead to Infinite Time logged in
Currently, I am trying to implement access token and refresh token in my application.
I am storing the refresh token in the user schema.
interface IUser {
refreshTokens: []
}
When the user logs ...
- 927
0
votes
0
answers
32
views
Ionic Angular App Issue in google sso while login using previous email
I am working on ionic app where have implemented google sso and apple sso. Previously we had issue, after even logout it was not clearing the cookies from the browser and if login again with sso it ...
0
votes
1
answer
205
views
Token refresh in Flutter with Dio interceptor
I'd need some help regarding token refresh in Flutter app which uses built-in Provider and Dio package. I use MVVM architecture with repositories and services as data layer.
I use go_router and its ...
- 79
0
votes
1
answer
107
views
How is a refresh token invalidated upon rotating it before its expiration period?
I am building an authentication using name, username and password and wants to use access and refresh token for the authorization.
To keep the user safe i come to know about an approach where you ...
0
votes
0
answers
45
views
why does google oidc refresh token and access token have same expiry of 1 hour?
I was using Google OIDC to get refresh tokens and access tokens for a continue with google option on my web page . So I used it to get an access token and refresh token. The access token lasts for an ...
- 51
0
votes
0
answers
126
views
How can I add refresh token functionality at server side?
I want to add refresh token functionality at server side in NextJS. From the server side I mean that the API that I call at server in page.js file. I am not using NextJS inbuilt backend.
Basically I ...
1
vote
0
answers
144
views
google auth2 with multi-user failed in refreshing a token, 401 Unauthorized
I've application connected to google calendar with multiple keys or users in accessing the oauth2 token. All users can register(using Servlet) and send the calendar event in around one hour after ...
- 97
1
vote
0
answers
281
views
Zoho CRM: Getting "too many requests" even when caching access token until expiry
I’m integrating Zoho CRM into my FastAPI backend and handling OAuth2 tokens like this:
I am giving multiple request togather to update or created data in different modules.
I use a refresh_token to ...
0
votes
0
answers
90
views
Excessive Refresh Token Requests in Nuxt Auth (sidebase)
Environment
bun v1.2.5
Operating System: Windows_NT
Node Version: v22.14.0
Nuxt Version: 3.16.0
CLI Version: 3.23.0
Nitro Version: 2.11.6
Package Manager: [email protected]
Builder: ...
- 11
0
votes
1
answer
389
views
Handling Expired Access Tokens in Next.js Services with Refresh Token Logic
I’m working on a front-end project using Next.js 15, where the backend is separate and responsible for user authentication. The flow is as follows: I send the user credentials (email and password) ...
0
votes
0
answers
63
views
How to manage access and refresh tokens with session wrapper without conflicts during OAuth authentication?
I'm using the access and refresh token flow for authentication in my app. The refresh token is stored in an HTTP-only cookie, while the access token is stored in memory (using Redux Toolkit) on the ...
0
votes
0
answers
138
views
Refresh Token Rotation on Next.js 15
What I want
I am developing an app in Next.js 15, and for authorization, I want to use JWT and Refresh Token, following this process:
When a user visits a restricted page, the system checks whether ...
- 21
0
votes
1
answer
76
views
Is it possible for authjs to refresh the auth token if I close the tab and return to my site in a new one?
I followed the guide for refresh token rotation and it is working for me. When I fetch the session from my Next frontend it does correctly refresh the token if needed. I've found, however, that if I ...
- 5,268
0
votes
0
answers
55
views
A new RefreshToken is not generating even after the expiration time has passed. JWT
I am working on a movie project where when i log in, it gives me a new access token every time i log in. expiration time of access token is 50 seconds. when i log in after even 4 seconds, it changes. ...
- 31
0
votes
1
answer
206
views
How to refresh access token when proxied request gets 401 response YARP
That's my YARP configuration:
builder.Services.AddReverseProxy()
.LoadFromConfig(builder.Configuration.GetRequiredSection("ReverseProxy"))
.AddTransforms(builder =>
{
...
- 1,048
0
votes
1
answer
125
views
How to generate an authorization code from a given scope and use it to generate a refresh token in Python for Zoho CRM API?
I'm trying to integrate with the Zoho CRM API using Python, and I need to generate an authorization code from a given scope (ZohoCRM.modules.ALL) and then use that authorization code to generate a ...
0
votes
1
answer
474
views
Automating Token Refresh in n8n Without Manual Execution
I am using n8n and need to automate the refresh of AWS Cognito OAuth tokens. Currently, I have to manually refresh the token every day, but I want to set up an automated process that ensures the token ...
- 1
0
votes
0
answers
124
views
What is the best practice method for automatically refreshing user's Keycloak access tokens with React + NestJS?
I have an application that uses Keycloak SSO for authenticaton. I have a confidential client registered on Keycloak. At the moment, for each HTTPS request from my front end to back end, I send the ...
- 15
0
votes
0
answers
138
views
Power BI Embed token refresh
I have embedded a PowerBI report using 'User owns data' concept. It's working as expected.
After 60 minutes the token expires regardless of user is active on the report or not. I added a setInterval ...
- 2,526
0
votes
0
answers
42
views
Nextjs: how to read a cookie with a "path" attribute
I am using a JWT for authentication to my backend, let's say at "http://myapp.com/backend".
The token is stored in a cookie, which I read and send in a "Authorization: Bearer" ...
- 7,323
-5
votes
1
answer
663
views
laravel passport cURL error 28: Operation timed out after 30001 milliseconds with 0 bytes received error
i want to use laravel passport to generate refresh and access tokens
i followed this Article : https://dev.to/mahmudulhsn/laravel-passport-api-authentication-with-access-and-refresh-token-16d0
but ...
- 19
1
vote
0
answers
39
views
Login fails due to Connection or Authentication Issues in Flutter App using Access Tokens
I am trying to login and fetch the user details. When I insert the mapVendorNumber and username strings, the code will combine the two as a final username (formattedUsername), then I am using a token ...
0
votes
1
answer
218
views
AAD OAuth refresh token is null when using aad_oauth library in Flutter
I am using the aad_oauth library in my Flutter app for Microsoft authentication. The authentication flow seems to work, but when I attempt to retrieve the refresh token, it returns null. Also I'm ...
- 129
0
votes
0
answers
25
views
Is there a method for Microsoft AAD Signin key refresh at regular interval using Microsoft.identitymodel library
Looking for the inbuilt method to refresh the ms aad sign-in key(which is getting refreshed by microsoft intra) at regular interval using the microsoft library identify model.
- 11
1
vote
0
answers
30
views
axios inside useLayoutEffect with StrictMode fires twice [duplicate]
I'm new to React and found a strange behavior inside useLayoutEffect function in my custom context (AuthContext - simple context to work with jwt and refresh token).
The problem: axios inside ...
- 190
2
votes
2
answers
383
views
Do I need to refresh the refresh token when using JWTs?
I’m using JWTs for authentication with an accessToken and a refreshToken.
The accessToken is short-lived (e.g., 15 minutes).
The refreshToken is long-lived (e.g., 7 days).
When the client uses the /...
- 21
0
votes
1
answer
201
views
How to add Refresh tokens in OpenId
I am using UseOpenIdConnectAuthentication
I have added scope as offline_access but if use below snippet then context.ProtocolMessage.RefreshToken. is not being found. Can anyone please help here?
...
- 303
0
votes
1
answer
106
views
Calling api request inside an interceptor for jwt refresh token going to an infinite loop
I am trying to implement the the refresh jwt token mechanism in an interceptor.
I am following the accepted answer way in this post
Angular - Waiting for refresh token function to finish before ...
- 9,046
-2
votes
1
answer
100
views
Passport password grant response issue
Anyone know to solve this problem?
if i do a post request on url http://127.0.0.1:8000/oauth/token using the parameters directly in postman, it does provides me access token and refresh token. But ...
1
vote
0
answers
55
views
eBay API refresh tokens
In my web app I don't have users or anything like that. I have a simple GET request https://api.ebay.com/buy/browse/v1/item_summary/search?q=\ to get some eBay products.
The things is that the token I ...
0
votes
0
answers
30
views
Refresh Token Mechanism Iterates Forever in OkHttp Interceptor
I am working on implementing a refresh token mechanism in an OkHttp Interceptor, but it keeps iterating forever when the token refresh is needed. The issue seems to be that the responseCount(Response ...
4
votes
1
answer
765
views
Google Identity Authorization (Android) : how to get refresh token?
I'm willing to add some kind of Google Drive synchronization to my (native) android app - no backend involved (everything will happen in the app).
As seen in the Google Identity documentation, I'm ...
- 1,387
0
votes
1
answer
1k
views
Get a refresh token of an SPA application using Microsoft Entra(Azure AD)
I have registered an application in Microsoft Entra as an SPA multitanent application with the permissions as Files.ReadWrite,offline_access and User.Read.
I use MSAL library in my frontend .I am able ...
- 27
0
votes
0
answers
55
views
Google Photos Library API Refresh Token ASP.NET Core MVC
I am trying to figure out if there is a way to get a refresh token for the Google Photos Library API. It seems like Google Photos Library does not support refresh tokens, because the photos are user ...
0
votes
0
answers
417
views
No PRT with Certificate Based Authentication in Microsoft Entra Hybrid Setup
I have Entra Hybrid setup where on prem AD is connected to Azure AD using AzureAD Connect.
From a domain joined computer, if user logs in with username/password, PRT is available and user can open ...
- 111
0
votes
0
answers
126
views
Supabase: Generate Custom Refresh Tokens
I implemented custom authentication for logging into a React app using Web3. Currently, I can authenticate by generating a custom JWT with the Supabase SDK in .NET, but the token is only valid for its ...
- 11
1
vote
1
answer
98
views
Does it make sense to use refresh tokens in combination with FIDO2 authentication?
An OpenID Connect authentication process for native apps can optionally return a long-lived refresh token that can be securely stored on the device. This allows users to subsequently use a pass-code ...
- 4,308
0
votes
0
answers
177
views
Iron-Session in Next.js 14: Session Not Updating After Refresh Token Flow
I'm using Iron-Session in a Next.js application to manage user sessions. The problem arises when I attempt to refresh the access token after it expires (HTTP 401 Unauthorized error).
Here’s the ...
- 325
-1
votes
1
answer
67
views
Getting refresh_token null in springboot3.3 using oauth2 google
I am using Spring boot 3.3 with below configuration
Application.yaml :-----
spring:
security:
oauth2:
client:
registration:
google:
client-id: xxxx
client-secret: xx
scope: profile, email, openid
...
1
vote
0
answers
71
views
Get google refresh token from keycloak
To integrate google-calendar in my backend i needs the end-user refresh token from google.
the needs is to reuse this refresh_token to push data into the end-user calendar when i get events in my ...
0
votes
0
answers
30
views
Where we should save refresh token and access tokens? [duplicate]
im'm making a fullstack application with next js.
i want to use both refresh token and access token with JWT.
this is very important. I'm using jwt and next js. not oauth etc...
i had maked my tokens ...
- 103
0
votes
0
answers
51
views
How to handle the Invalid Grant error in a ruby service?
I'm working on a Rails application integrated with the NetDocuments API, where multiple users access a single service account. The API uses single-use refresh tokens to obtain new access tokens. ...
