11
Posts
3
Kudos
0
Solutions
About FirstNameL86527
FirstNameL86527
Campaign Expert
since
09-08-2018
12-27-2021
Badges
01-22-2021
03:09 PM
Not so obvious 🙂 Yes, that was the problem. I wasn't aware of the short life of the Auth Code. Thanks!
... View more
01-18-2021
02:24 PM
When I try to convert my access code to an access token I'm getting the error: Status 400. Authorization code is invalid or expired Error: invalid_grant I formerly had this working, but moved code to my local dev machine. The steps I tried taking: 1) Delete existing auth token/refresh token file 2) Called https://api.cc.email/v3/idfed?client_id=<redacted>&redirect_uri=https%3A%2F%2Flocalhost&response_type=code&scope=account_read+account_update+contact_data 3) When this returned a page on my browser, I logged in. I then took the auth code from the redirect url (?code=xxxxxxxxxxxxxx) 4) I called the following code, setting the authCode to xxxxxxxxxxxxxx from the step above String tokenFromAuthCodeUrl = "https://idfed.constantcontact.com/as/token.oauth2?code=" + authCode + "&redirect_uri=https://localhost&grant_type=authorization_code"; HttpRequest httpRequest = null; java.net.http.HttpResponse< String > response = null; HttpClient httpClient = HttpClient.newBuilder().build(); httpRequest = HttpRequest.newBuilder() .uri( URI.create( tokenFromAuthCodeUrl ) ) .header( "Authorization" , refreshTokenHeadersMap.get( "Authorization" ) ) .POST( HttpRequest.BodyPublishers.ofString( "" ) ) .build(); response = httpClient.send( httpRequest , java.net.http.HttpResponse.BodyHandlers.ofString() ); 5) The response returned is Status 400. Authorization code is invalid or expired Error: invalid_grant I'm not sure where to go from here. Can anyone see a problem with what I'm doing?
... View more
06-10-2020
05:49 PM
1 Kudo
You only need to do the manual process once. From then on, it works without any further manual interaction. Step 1 (manual-one time): Call the URL to get an authorization code. I have it respond to local host, which errors, but you can get the authorization code from the response URL: https://api.cc.email/v3/idfed?client_id=<redacted>&redirect_uri=https%3A%2F%2Flocalhost&response_type=code&scope=account_read+account_update+contact_data Step 2 (only necessary the first time): Calls return both an authorization code and a refresh_token. Save the refresh_token in a file and use the authorization code for any API calls: https://idfed.constantcontact.com/as/token.oauth2?code=' + self.authorization_code + '&redirect_uri=https://localhost&grant_type=authorization_code Step 3: Get a new authorization code and refresh_token (saving to a file) once the authorization_code from step 2 expires: https://idfed.constantcontact.com/as/token.oauth2?refresh_token=' + refresh_token + '&grant_type=refresh_token So, I do step 1 and step 2 once. I do step 3 every time I run my app from then on. (Note, It's been several months since I last worked on my code, so I hope I've responded accurately).
... View more
12-12-2019
07:56 PM
1 Kudo
"you do NEED a public web server to get the code that CC sends back" Not necessarily. I used https://localhost as my redirectURL. It sends back the URL that I then paste into my browser. It attempts to redirect to the localhost URL and fails (page cannot be found), but shows you the auth code in the "failing" URL e.g. https://localhost/?code=0zucYcwmhnq3EhCImXXXXXXXXXXXXXXXXXKTgEt
... View more
12-12-2019
07:45 PM
It appears the problem is due to the rapidity of calls to get the refresh token. I have a loop of calls to refresh the token 25 times. When called I get several successful refreshes, then, I get just an access_token and token_type. But, if I add a 5 second delay between calls, all 25 work fine. Given that 25 immediate consecutive calls isn't really a valid use case, this doesn't appear to be a problem. I originally was just experimenting with the API call to get a refresh token when this problem occurred.
... View more
12-12-2019
02:59 PM
Raleigh, What is your use case? I am fighting the API to run "unattended" batch processes. If yours is similar, I've gotten to the point where I can get an access token and create a list. But it requires I include a manual step to pull the code from the redirect url in order to get the access token.
... View more
12-11-2019
05:37 PM
1 Kudo
Just to clarify: If I somehow lost my refresh token (when using Server Flow for OAuth), is the only way to recover to go back and generate a new Authorization Code (i.e. redoing steps 1-3 in the docs https://v3.developer.constantcontact.com/api_guide/server_flow.html )
... View more
- Tags:
- v3
Labels:
- Labels:
-
authentication oauth
-
oauth2
12-11-2019
05:27 PM
I am using server flow to authenticate a batch process. I successfully exchange the authorization code for an Access Token and Refresh token (step 4) of the documented process. Next, I have a loop (as I am still in an early debug stage) where I refresh my token 5 times - just to see if it works. The first 4 responses include 'access_token', 'refresh_token', and 'token_type'. The 5th call, however, only returns an 'access_token' and a 'token_type'. Why am I getting this strange (to me, at least) response? I'd expect it to look like the previous 4 - which included a 'refresh_token'.
... View more
- Tags:
- v3
Labels:
- Labels:
-
authentication oauth
12-10-2019
04:52 PM
Thanks! That did the trick.
... View more
12-10-2019
04:12 PM
For clarification, if using the server method, I manually authorize once (ever) then simply renew the token using that code from then on in my batch upload code?
... View more
12-09-2019
05:45 PM
I'm fighting with the API trying to get authenticated. I'm trying to get authenticated so my script can add new members to my contacts/lists each week (or on demand) from another application. That means there is nobody Accepting or Denying whether to allow access - it should always allowed by this app. Likewise, I have no legit redirect URL, so I just use localhost. I'm using Python and calling a GET to: https://api.cc.email/v3/idfed?client_id=xxxxxxxxxxxxxxxxxx&redirect_uri=https%3A%2F%2Flocalhost&response_type=token&scope=account_read+account_update+contact_data Once I've done this, I'm stuck. I've read the documentation found in "Authentication Overview", but that doesn't clear up what to do in my case. There is nobody available to click the Accept button as this is an automated process. Once I have the response from the GET above, what steps are required to get an access_token? TIA.
... View more
- Tags:
- access token
- API
- v3
