Questions tagged [api-authorization]

70 questions
0
votes
0 answers

Options for Secure API requests from a CDN Cache?

I'm having some trouble finding suitable options for reducing my bandwidth demands on an API I'm working on that serves mostly static files. Currently my customers subscribe to my API and are able to request public API keys. With those keys they can…
Justin M
  • 103
  • 1
  • 8
0
votes
0 answers

Curl authorization with access token doesn't work (symfony 4)

Project is reilized with Symfony 4.4 version. Problem 1 when I move first line in the end, symfony dont require authorization for ^/api urls access_control: - { path: ^/api, roles: [ IS_AUTHENTICATED_FULLY ] } - { path: ^/, role:…
0
votes
0 answers

ASP.Net Web API: Token based authorization not working

I am implementing token based authentication in my Web API project. Following is the code I am using to validate the token. Although my token is valid, I am getting the response as "Authorization has been denied for this request" and I don't know…
astm1982
  • 105
  • 10
0
votes
1 answer

DotNet Core Custom Authorize Attribute using Route Params

I googled this and nothing was found, so I would like to know from those who use DotNet Core for a longer time than myself. I am now to DotNet core. I am currently creating an App just for the sake of practicing. I noticed that in most of my Apis'…
RNA
  • 13
  • 4
0
votes
1 answer

Azure AD with Bearer token authentication for Web API not working throwing error as "Authorization has been denied for this request."

A noob question on the way. I have developed Azure Ad authentication for a Web APi using the example from Git site [https://github.com/Azure-Samples/ms-identity-aspnet-webapi-onbehalfof/tree/master/TodoListService] I have been facing an issue with…
0
votes
0 answers

Postman not able to authenticate but modheader does

I have an API with API Key auth schema. when using the mod header extension to chrome I can authenticate and access the endpoint but when using the same header and same key in postman or swagger it fails. Does anybody have any clue as to why that…
user12177026
0
votes
0 answers

Creating "Headers" object in Google Apps Script for API call

I am looking to pull data from Thinkific's API into a Google sheet, but unfortunately I am not able to create a working API request in Apps Script. I have built the request in Postman and tried to just reuse the javascript code in Apps Script, but…
0
votes
0 answers

Seo panel Google API verification fails

I've setup Seo Panel ( https://www.seopanel.org/) several times already on different websites and it's always worked ok. I recently migrated to a new server and when setting up Seo Panel the API verify connection fails and no data is collected. The…
0
votes
0 answers

Laravel api_token authentication test API with Postman 403 Forbidden when APP_ENV=production but not testing

I'm using Postman to test my Laravel API. It's a really simple API based on API Authentication in Laravel 6.x My api_token is submitted using a form-data in Postman. This works perfectly when APP_ENV in the .env file is set to local, but the moment…
Eugene van der Merwe
  • 3,864
  • 1
  • 31
  • 43
0
votes
1 answer

Creating API Authentication using PHP Oauth class

I am trying to setup API authentication for APIs that I have created using PHP. My website, (Client) has been created using React. I have been researching and I cannot find anything that explains what I need to know. One of the main resources I am…
Chris
  • 619
  • 1
  • 10
  • 29
0
votes
2 answers

Google Data Studio: How to enable authentication for API connector using 2 KEYS

I am trying to write a connector in GDS for a web service API. The API authentication method uses 2 KEYS (passed in the header): X-App-Key and X-User-Key A 2-key auth flow doesn't fit into the 5 authentication options available in my .gs connector…
Kinglish
  • 4,042
  • 2
  • 15
  • 27
0
votes
1 answer

Alexa skill that uses data from an external API with API-KEY

Im trying to access an external API from the alexa back end code using lambda that runs on node.js 8.1,the code can access any endpoint that doesnt require an api-key but i cant find a way to include my authoraztion (api-key) in the code so i can…
0
votes
1 answer

How can I define policies for my API for two types of access tokens, one with an identity (sub) and one without?

I am using IdentityServer4 via ASPNET Core, and I want users to access my API both by the web browser via their identity (Implicit and Hybrid), and by clients programatically (Client Credentials). I realize all I have to do is add…
0
votes
0 answers

Can't access API with access token authorization in python automated tests

I am writing automated api tests in python for rest api's. I have the access token but it says "Access denied". The same token works with postman request. Can someone let me know if I am missing something in my code? import json import…
0
votes
1 answer

Api Authentication with Salesforce using Google as an Identity Provider

I'm a bit new to the authentication/authorization landscape and need some advice on how to architect/implement an application that will ultimately be connecting to Salesforce and retrieving information. At a very high-level, I'm building a mobile…