How to get client key and client secret for dropbox app - oauth-2.0

How to get client key and client secret for dropbox app? I have the app_key and app_secret for app. but i need to get the client key and client secret. Using a help provided by drop, I am able to generate access token. this client key and client secret are requested by Manifold connector for dropbox.

If you want develop an application running on Android platform, you can to go developper console to set up an application, get client key and client secret.

Related

What is the usage of client secret in azure active directory b2c?

What is the usage of client secret in Azure AD B2C? The Microsoft doc only said
If your application exchanges a code for a token, you need to create
an application secret..
Will the azure ad b2c encrypt the token by the client secret, or if a native app requests a token need to send the client secret to the azure ad b2c endpoint?
And, does the client secret can be used to make only my trust native app can get the jwt then to visit my server, third part untrust app can't get the token from the b2c to visit my server?
and what is the usage of application id uri?
thanks.
It has nothing to do with whether you are using Azure AD or Azure AD B2C.
client_secret is required for web apps rather than native apps because client_secrets can't be reliably stored on devices.
It's required for web apps and web APIs, which have the ability to store the client_secret securely on the server side.
The official document: Add a native client application to your Azure Active Directory B2C tenant also doesn't mention that you need to add a client secret.
What you have seen in Microsoft doc is for web apps.
and what is the usage of application id uri?
Application ID URI is the unique URI that is used to identify your API. When requesting an access token for this API, the whole URI should be added as the prefix for each scope.
If you have a web API protected and use another client app to access this API, you can enter the identifier used for your web API. See details here.

Unable to Authenticate on Podio API using Access Token

I am using oAuth Model to access Podio API. I am able to generate the Access Token and Refresh Token using a pair of Client ID and Client Secret.
Later when i tried to authenticate using previously generated Access Token and Refresh Token with new pair of Client ID and Client Secret then getting Following Error Message:
{"{\"error_propagate\":false,\"error\":\"invalid_grant\",\"error_description\":\"Invalid refresh_token\",\"error_detail\":\"different_client_id\",\"request\":{\"url\":\"http://api.podio.com/oauth/token\",\"query_string\":\"\",\"method\":\"POST\"}}"}
When i tried to authenticate using same Pair of Client ID and Client secret that was originally used to generate the Access Token , it Works.
My Question is: Can we use different Client ID and Client Secret to authenticate through Access Tokens that were generated using different Client Id and Secret.
I hope i have clearly described my question.
No, access tokens are tied to a specific client and secret. Allowing access tokens to be used with other clients would be a security hole.

Using OAuth 2 in Postman for Save to Android Pay API

I've seen these questions about using Postman in order to invoke Google's API with OAuth 2:
Using Postman to access OAuth 2.0 Google APIs
Could not obtain Google oAuth 2 token on POSTMan
and many more, but they all have client ID and client secret.
For the 'Save to Android Pay' API, all I got is a .p12 key and an issuer ID. I also have Service Account Email Address but defiantly no client id or secret. I think I also have the Auth URL but I'm not sure: https://www.googleapis.com/auth/wallet_object.issuer
Looking in the Save to Android Pay API, doesn't say anything about a client id so I'm really not sure how I'm supposed to obtain a token in POSTMAN with what I have.
So my question is: giving a .p12 key, an issuerId and a Service Account Email Address, What do I need to fill in POSTMAN OAuth 2 fields:
Token Name, Auth URL, Access Token URL, Client ID, Client Secret, Scope (Optional), Grant Type
To obtain OAuth 2.0 client credentials, you need to register an application to the Google API Console as specify in the basic steps and then you'll get a client ID and client secret.

how to get consumer key and secret with application token using oAuth?

I am using oAuth to call Intuit Quickbook Onlinde data API.
Is there any method to get comsumerKey and Secret ussing App Token value in oAuth ?
thank,
manish
You can use this - https://appcenter.intuit.com/Playground/OAuth
Connect to QB Ref (3 legged Oauth) Ref - https://developer.intuit.com/docs/0025_quickbooksapi/0010_getting_started/0020_connect/0010_from_within_your_app
You can refer the sample JAVA/.Net app as well to generated accessKey, accessSecret against your QBO account(relam).
Thanks
As the official document says:
Both Consumer Key and Secret are assigned to your app by Intuit and displayed in the app profile on the IPP developer site.
consumer key
An OAuth value, used by the app to identify itself to the Intuit OAuth provider service. The consumer key is generated when you create the app on the IPP developer site and is displayed on the Manage App tab. The Development and Production instances of an app have different consumer key values. A consumer key is required in the header of an HTTP request to Data Services for QuickBooks or the QuickBooks API.
consumer secret
An OAuth consumer secret. A secret used by the app to establish ownership of the consumer key. The consumer secret is generated when you create the app on the IPP developer site and is displayed on the Manage App tab. The Development and Production instances of an app have different consumer secret values. A consumer secret is required in the header of an HTTP request to Data Services for QuickBooks or the QuickBooks API.
And here is a tutorial of Implement OAuth in Your App.

Related to OAuth

I want to provide OAuth protocol to my own application using webservices for credentials.
How to get the secret key and consumer key to my application.
If it's your application, then you need to be able to generate the tokens on your server.

Resources