How to get an Application Specific Password?

How can I get an Application Specific Password? Based on the doc, it seems like that I have to go to this page https://online-go.com/user/settings for the password, but I cannot find any option to generate it.

Welcome.

Schermafbeelding 2021-08-24 om 22.31.59

What do you need the application specific password for? (Are you developing an application and need to get application specific passwords for users or are you using a third party application?)

Much of our api documentation is outdated. If I’m not mistaken, third party applications usually pass along the account password to our api which will then return an access token directly to the application.

2 Likes

I am trying to build a simple UI for OGS (for children in 4-8), which calls the API for handling the game logic.

As for this question, I am trying to get the Access Token for Oauth2 and communicate with OGS api. Can I get this application specific password programatically? Or is it by design to only all manual generation?

Much of our api documentation is outdated. If I’m not mistaken, third party applications usually pass along the account password to our api which will then return an access token directly to the application.

Can I use user password instead of application specific password for requesting token?

2 Likes

@RubyMineshaft And I am getting 404 for POST https://online-go.com/oauth2/access_token. Is there any documentation for the updated API? Which URI should I be looking for?

1 Like

I’m not personally very familiar with our API, but I found the following in different places on the forums.

It seems that the user password is exactly what you want according to OAuth2 Client Credentials - #4 by matburt

From Apiary Documents Out of Date? it looks like we’re using https://online-go.com/oath2/token now.

I hope that helps. If not, @flovo is probably one of the people most familiar with the API and can likely point you in the right direction.

1 Like

you can get the application token at Play Go at online-go.com! | OGS

I think the Authorization grant type should be resource owner password-based. With the client id, secret, and the user credentials you should be able to request a access token as described here null - Apiary Documents Out of Date? - #2 by flovo

2 Likes

https://online-go.com/oauth2/access_token/

The secret is adding the / at the end.
I just spent 2 days figuring this out, lol.
Message me if you need help.

Also is there somewhere I can learn more about your project?

2 Likes

This is possible, but definitely not the preferred option. The Authentication code flow currently works though.

Also @flovo in searching the forum I only ever saw your suggestion to use the password flow and never even attempted to use the User Flow for over a year. It kills me inside, still thank you for your suggestions. But maybe suggest the authorization code Flow from now on.

LOL ok I haven’t though of trailing slash at all. Thank you so much!

I have set up a repo here, but I haven’t done anything special with it yet. It will be awesome if you want to step in and write a client together:)

Yes I have been doing OAuth2 with authorization code, and I prefer this as well. Cheers!

Sorry @Devin_Fraze is there any documentation on using grant_type=code in ogs? I am not able to find them.

Keep getting 401, after an hour of debugging, I found out that I have defined my application in beta…fml

But the password grant is working alright. Thank you for the help everyone.

1 Like

@flovo Sorry for pinging you again, but it seems like the access_token I am getting from ogs auth server is not a valid JWT token, but a opaque token. Is this by design? Can I request a JWT token instead for decoding it to get useful user data?

You get the chat_auth, incident_auth, superchat_auth, notification_auth, and user_jwt at https://online-go.com/api/v1/ui/config using the acquired token.

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.