Comments (13)
@d11wtq Thanks. I have generated a new token and used the latest generated token in the request. I can confirm that the old tokens are not used as explained on the docs that they will be revoked once new token is issued.
Are the requests monitored for the whitelisted IP Addresses? Does the request need to pass any additional headers etc?
from api.
@d11wtq No more an issue. I can get the response now. Not sure what was wrong.
Whats the token timeout?
{
"meta": {
"id": "9bec95e8-0ca8-42f2-9e10-585c2c84c0f1",
"statusEmoji": "⚡️"
}
}
from api.
We've just deployed a fix for this. Essentially now you can only have the QR code page open in one window at a time. Opening a new window invalidates the others.
from api.
@yogeshpathade thanks for reaching out. The token should have something after the up:yeah:
part. Without posting the actual token here, can you confirm you are sending the full token correctly?
from api.
@d11wtq I can confirm I am passing through the actual token.
Removed it in the issue description for Security reason.
curl --location --request GET 'https://api.up.com.au/api/v1/util/ping' \ --header 'Authorization: Bearer up:yeah:oh<REMOVED'
from api.
Have you only generated one token? Currently generating a token will revoke any existing tokens.
from api.
Is it possible you have some additional white space before the token? Not seeing anything obvious on our end.
from api.
could you try wrap the --header part with "" instead of '' ?
--header "Authorization: Bearer up:yeah:oh<REMOVED"
from api.
Closing this issue. I could access all of my accounts and transactions.
Thanks for your help @d11wtq
from api.
Fantastic!
Whats the token timeout?
While we're in beta and access tokens are for personal use only, there isn't one. This will change when we start supporting third parties accessing your data.
from api.
Thanks, @d11wtq For your prompt response.
I found the problem with the Unauthorized 401 responses happening yesterday. It's probably a bug.
I had the get access token page open in multiple tabs of the browser https://api.up.com.au/getting_started and when one of them I scan a QR Code to confirm the IP address request from the Up App both (or all) the open pages fires the request
GET https://api.up.com.au/auth_granted
to fetch the tokens which in the race condition one of them revokes the previously granted token. Assuming the Open tab page which is used to scan the QR Code has the latest token to copy makes the API request failed with 401 since the tokens are already overridden and revoked by some other pages in the background.
I should probably raise this as a bug?
from api.
Ohhhh, good find. That definitely sounds like a bug. @plasticine fyi.
from api.
Looks good. Thanks @d11wtq
from api.
Related Issues (20)
- Grammatical error in the Error Response documentation. HOT 1
- Receiving 'Invalid Parameter' for a valid rfc-3339 date using filter[since] HOT 3
- Expose Spendable Balance HOT 4
- Feature Request: Expose Upcoming List HOT 1
- Feature Request: Be able to match a contribution in a two up account HOT 1
- Feature Request: Include savers goal amount in Accounts API response HOT 2
- List transactions by account endpoint returns html when using invalid accountId HOT 1
- No Account Info for deleted Transactions HOT 6
- Incorrect RFC Validation on filter[until] and filter[since] HOT 1
- Identifiable Transaction Owners HOT 3
- Get more than 100 transactions and Filter on Tags HOT 2
- Transfer verses Roundup inconsistency HOT 4
- Transfer money between savers HOT 2
- Transactions endpoint to return notes field HOT 6
- Expose Payments and Savers Information HOT 2
- Is the Up Bank API going to be expanded? HOT 8
- Generate token in app HOT 3
- API Bugs HOT 1
- Open Banking public endpoints HOT 2
- Expose Notes and Photos linked to transactions HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from api.