740na (740na) asked a question.
Hello guys!
We wanted to use okta to test oauth2. Yet, we get an invalid access token if we request our endpoint. (https://exentra.okta.com/oauth2/v1/token)
One access token for example is: eyJraWQiOiJUQWpOeTdRWV9odzR4azdCbzNlMWRDLTJWNGR3WUo0V3UwUHNvNlB5Y3lFIiwiYWxnIjoiUlMyNTYifQ.eyJ2ZXIiOjEsImp0aSI6IkFULkh6c09iSHJQYmtKUTM5b2Nwbzc0RXRZOUtRTlJEME1XblE1WS1ScFlEYlUudEEwTm8zdXdXdHRoYy9qdmhKVnBVRTZSUndxUFZIM2VRdzc1SWxvWnR6QT0iLCJpc3MiOiJodHRwczovL2V4ZW50cmEub2t0YS5jb20iLCJhdWQiOiJodHRwczovL2V4ZW50cmEub2t0YS5jb20iLCJzdWIiOiJhbmRyZWFzLmJ1ZXNjaGVyQGV4ZW50cmEuZGUiLCJpYXQiOjE1NDA0NzE2MjksImV4cCI6MTU0MDQ3NTIyOSwiY2lkIjoiMG9hMnJrb3R2MXN6em1NQUwzNTYiLCJ1aWQiOiIwMHUycmxid2o0RHFmVUVnVDM1NiIsInNjcCI6WyJvZmZsaW5lX2FjY2VzcyIsInByb2ZpbGUiLCJvcGVuaWQiXX0.acKPt0YO_CXXPF3LLwVxQyHW8Qd-t3w-HrVO17JvXG96fb4WzQDD7tZEkNO81x2nck8FyxciF5XElD-_IF9U_tXmRRqA7K9pwWBU4BZ26-SNa40FurKR4b7dqKa1DJJ3SvF93wxJ26q01OvfdCJqY5ukntG8I_w971SgqRN3pQHwJ87IIV_J-yR6NoXjHjXBwqonfGjPOX4mw7UekQTmfpzX7yN_ZCgAmYq4sW_9gXpAsRw9zcH2qNKt97-T74BBehwdrJR1rpCoiwsq_IJ94kwYrSsw-7qwKtUSDLS-K7MvDlJIkUSBt8QbYTPg48ryNhsUzrgggy3EW0WBl7qB9Q
The verfication of the signature is invalid. What can we do to get a valid token?
Hi Andreas Büscher,
Investigation into issues with access tokens would require a Support Case to be filed, along with the complete request and response. In the meantime, if you would like to research on your own, below are some helpful links to get you started with OAuth and OIDC:
https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth
https://developer.okta.com/blog/2017/07/25/oidc-primer-part-1
https://developer.okta.com/authentication-guide/auth-overview/#authentication-overview
https://developer.okta.com/authentication-guide/implementing-authentication/index
https://help.okta.com/en/prod/Content/Topics/Security/API_Access.htm
https://developer.okta.com/authentication-guide/implementing-authentication/set-up-authz-server
https://developer.okta.com/authentication-guide/tokens/index
https://developer.okta.com/docs/api/resources/oauth2
https://developer.okta.com/standards/OAuth/index.html
https://developer.okta.com/standards/OIDC/
If intensive assistance is needed, our Professional Services team can aid with building these types of integrations and provide the resources for an adequate implementation. Not a requirement, but always a good option, if necessary.