Authorisation Failing - Short Access Code
Hey guys, I am trying to re-authenticate an existing client with our App however when we do the request to https://secure.myob.com/oauth2/account/authorize?client_id=[YOUR API KEY]&redirect_uri=...
Forum Discussion
I have been getting this for an entire week and Tana in tech seems to be going around in circles obviously not getting an answer to why.
I get EXACTLY what you get - and there is no forward slashes or anything in my redirect.
I even changed my redirect from http://desktop to http://localhost - I still got but the Access Code but there was no json payload which should give you a blank page without an error with an embedded token that can be extracted easily as it starts with "Code".
No matter whether I use a different server, laptop, totally rebuilt laptop Win 11 using Edge browser the result is identical.
My last post to Tana was that the Elephant in the room seems to be that the initial GET for an Access Code seems to be no longer valid - I just cannot get someone to agree and say "yes" or "no".
Unfortunately all my code is MSAccess 2019 - the Edge Browser comes only in the Access 365 version yet I doubt this will be the answer - I am going to try to spin up a VB.Net program in Visual Studio using MYOB's latest SDK - I believe a WebViewer2.Net is available but I still believe the result will be the same.
The Doc
Hi The_Doc , we are experiencing exactly the same issue. I sent a support request to the API support team this morning.
Our app is configured to use the latest IE or Edge, whatever is found, so I doubt that the IE version on our side is the problem.
PS. Same as the OP here, I noticed that the access code is now much shorter and starts "ory_...".
A comment was made by MYOB staff last week as follows: "At this stage we are not sure what actually caused this issue, but identity services are going through some changes which may have caused this issue. We will find out. "
I suspect that MYOB have taken on a third-party identity services product, which explains the change of behaviour. I found www.ory.sh, which appears to provide this kind of service.
Perhaps MYOB could confirm this, and explain how we should proceed now?
Hi Mike
Nice to know I am not the only one going slowly mad - actually this was what was happening with the initial problem it all crashed 2 weeks ago - the refresh tripped.
Once you have your Authorisation Code - which has an expiry of 7 days it comes with an Access token and a Refresh - the Access token worked and gave 20 minutes access but the Refresh gave the token "ory........ scope offline"
However, after being offline for 3 days I spotted by chance that just asking for a new Authorisation Code got me an Access Code and I was able to jury rig a manual continuation.
Then MYOB rolled out a fix Tues night 2 weeks ago - supposedly fixing everything - sure did! Right and proper - I was fully dead.
But NOW the Authorisation Code started with "ory...." and I have been locked out despite every effort to find a soln around.
Tana in tech kept bouncing Antview2 at me - though I said it likely not the problem but a symptom - I loaded that this morning just to be absolutely sure this was not the problem.
I have posted a new reply to Tana to finally say - THIS IS NOT OUR PROBLEM!
I will spin up a VB.NET program this weekend - if I can get my head down - I was not competent in VB.NET or VC#.Net 10 years ago when I built my code - I am now in both so I think I can get a VB.NET up and running in short hop this weekend JUST to confirm "it aint our problem".
Pretty sure you will already have done that, but I need to tell Tana - tried everything.
Also, need a fallback collection of programs to test out problems for the future - pretty sure this is going to be on-going.
The Doc
Hi Mike_James
Strangely, apparently this code is correct and works - hmm - I manually processed it through my old code and got back a legit Access_token and Refresh_token
The method that gets this from the returned payload is
Dim sourcestr as string
sourcestr = me.Antview2.source
Assume http://desktop is your redirect is
http://desktop/?code=oryac.... ..... &scope=CompanyFile.....
This is your Access Code - don't decrypt - use this as per normal to get your Access_token & Refresh_token per normal things should work.
I hope - ......
The Doc
