WPIntell

Source evidence

OAuth2 Access token is empty

WP OAuth Server ( Login with WordPress ) · support · 2019-08-12T15:46:00+00:00

mixedsentiment
mediumseverity
0.78relevance
5replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

5 / 29 rows with source links

17.2% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

24 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
jordiblanchcarles resolved
I’m having problems to retrieve user profile after succesfuly authenticate to my WP site with your OAuth server. When I try to get the user profile, the server answers with an error: data:”{“error”:”invalid_bearer_token”,”error_description”:”OAuth2 Access token is empty”}” statusCode:400 The GET method Authorization header contains “Bearer the_access_token”, so I do not understant why is it complaining about Access token being empty. What could be causing this issue? Thank you! Hi, Can you confirm if you are sending access token in format below. GET <user-info-endpoint> Header: Authorization: Bearer <access-token> Can you also please share your User Info endpoint so that we can take a look. Hello, yes, I’m pretty sure I’m doing it the correct way. Anyway, here it is the configuration I’m testing right now: Client ID: EbwEwxyeUqesSqfNnoizLieJQJuHlo Client Secret: EhwEDzUVWVLfIJsJVQXABgsSydiKGI Authorize Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/authorize Access Token Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/token Get User Info Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/resource You can test using username: demo – passwd: demo When it is working properly I’ll change all these values so that these ones will not work anymore. Thank you. Thanks you for sharing the details. Can you also please share the configured CALLBACK URL with client ID you provided. Hello, sorry I forgot it… Authorized Redirect URI: http://localhost:3000/auth/cityadpro/callback Thank you! Hello, We have fixed this issue in updated version of a plugin. Please update the plugin and it should be working fine. If you still face any difficulty, you can mail us at info@xecurify.com

Comments

5 shown
miniOrange 2019-08-12T17:28:00+00:00

Hi, Can you confirm if you are sending access token in format below. GET <user-info-endpoint> Header: Authorization: Bearer <access-token> Can you also please share your User Info endpoint so that we can take a look.

jordiblanchcarles 2019-08-12T18:47:00+00:00

Hello, yes, I’m pretty sure I’m doing it the correct way. Anyway, here it is the configuration I’m testing right now: Client ID: EbwEwxyeUqesSqfNnoizLieJQJuHlo Client Secret: EhwEDzUVWVLfIJsJVQXABgsSydiKGI Authorize Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/authorize Access Token Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/token Get User Info Endpoint: https://cityadpro.com/wp-content/plugins/miniorange-oauth-20-server/web/index.php/moserver/resource You can test using username: demo – passwd: demo When it is working properly I’ll change all these values so that these ones will not work anymore. Thank you.

miniOrange 2019-08-13T08:06:00+00:00

Thanks you for sharing the details. Can you also please share the configured CALLBACK URL with client ID you provided.

jordiblanchcarles 2019-08-13T08:39:00+00:00

Hello, sorry I forgot it… Authorized Redirect URI: http://localhost:3000/auth/cityadpro/callback Thank you!

miniOrange 2019-08-13T11:37:00+00:00

Hello, We have fixed this issue in updated version of a plugin. Please update the plugin and it should be working fine. If you still face any difficulty, you can mail us at info@xecurify.com